Senior Security Specialist

Location

Chennai | India

Job description

JOB SCOPE

Role : Senior Security Specialist

Application Security Specialist is a hands-on tech oriented position. You will play a pivotal role within the Cyber Security Practice and work with delivery teams as well as networks and infrastructure support teams.

• Embed security throughout the lifecycle of software delivery
• Building and defining Security Testing practices
• Play a consultant and advisory role to delivery team and clients

Responsibilities

• Work closely with Application Development & IT team and serve as a single point of contact for all security testing related activities
• Executing manual network, application penetration tests and security code reviews
• Analyse application security architecture and understand security threats
• Draw Data Flow Diagrams (DFD), prepare threat models, identify threats and suggest mitigation steps
• Design and execute security test cases
• Create and review security test reports and evidences
• Provide recommendations to clients in fixing vulnerabilities
• Develop frameworks and methodologies to evaluate security in new and emerging technologies including mobile application such as IOS, Android etc.
• Assist in building security testing competency
• Mentor and provide technical guidance to team members in executing test cases
• To define testing criteria for systems and applications.
• Write SOPs, SOWs
• Technical and Process reviews of the team output represent the team reports to all stakeholders.
• To work with end clients to develop strategies and plans to enforce security requirements, and remediate identified risks / vulnerabilities.
• Assist in building security testing competency

JOB REQUIREMENTS

• Bachelors Degree (or equivalent) or advanced degree highly desired.
• 5 - 7 years of Security Testing and Project Management Experience
• Good knowledge of network & application security vulnerabilities
• In-depth knowledge and experience with OWASP, SANS, CERT, WASC standards/frameworks for security testing and security code reviews. OSSTMM for network penetration testing
• Experience in manual and automation penetration testing tools and techniques. Should have experience in using tools like Burp, ZAP, Veracode, Fortify, WebInspect, NMap etc.
• Experience in performing threat modelling and identify attack vectors. Must be familiarity with STRIDE and DREAD concepts.
• Must be able to handle tasks/activities with competing priorities
• Must be able to work independently & guide team
• Ability to handle multiple customers simultaneously from different industry verticals
• Ability to manage a diverse team and getting them to deliver as expected
• Ability to handle team challenges and resolve conflicts
• Good verbal and written communication skills with the ability to talk to both business teams and technical teams
• Security certifications such as OSCP, CEH, ECSA, GPEN

ABOUT THE CLIENT/BENEFITS

Exela is a business process automation (BPA) leader, leveraging a global footprint and proprietary technology to provide digital transformation solutions enhancing quality, productivity, and end-user experience. With decades of expertise operating mission-critical processes, Exela serves a growing roster of more than 4,000 customers throughout 50 countries, including over 60% of the Fortune® 100. With foundational technologies spanning information management, workflow automation, and integrated communications, Exela's software and services include multi-industry department solution suites addressing finance & accounting, human capital management, and legal management, as well as industry-specific solutions for banking, healthcare, insurance, and public sectors. - Through cloud-enabled platforms, built on a configurable stack of automation modules, and 17,500+ employees operating in 23 countries, Exela rapidly deploys integrated technology and operations as an end-to-end digital journey partner.

Health & Wellness

We offer comprehensive health and wellness plans, including medical, dental and vision coverage for eligible employees and family members; paid time off; and commuter benefits. In addition, supplemental income protection including short term insurance coverage is available. We also offer a 401(k)-retirement savings plan to assist eligible employees in saving for their retirement. Participants are provided access to financial wellness resources and retirement planning services.

Military Hiring:

Exela seeks job applicants from all walks of life and backgrounds including, but not limited to, those who are transitioning military members, veterans, reservists, National Guard members, military spouses and their family members. Individuals will be considered no matter their military rank or specialty.

Disclaimer: The job advertisement listed above is verified by Jobs2Grab.com for a present or future talent requirement from our client employer. This could be for developing their talent pipeline within their portfolio specialisation areas. Job2Grab.com holds no responsibility for any obsolete advertisements that it has no control of managing those postings. Please contact our client employer's talent acquisition team or visit their direct careersite for any clarification if needed. If you are a client employer and wish to have this job unlisted, please login to your employer account to terminate the job posting or you may contact our support team.

Job tags

Salary