Vulnerability & Application Security Engineer

Brak informacji o wynagrodzeniu

MidHybryda·WrocławFull-time

#474182·Dodano dziś·0

Źródło: nofluffjobs.com

Aplikuj teraz

Tech Stack / Keywords

WirelessSecurityTestingManual TestingWiresharkNessusC C++C#Java ASP.NET Perl Python OWASPTCPNetwork SecurityAIAndroid iOSCommunication skillsIPSOSCPCISSPCISMCISADegree

Podsumowanie oferty

The Information Security Analyst supports team leads in a security functional area within Technology Assurance. The team provides security assurance, including application and network penetration testing and vulnerability identification.

Wymagania

Hands-on experience in web, thick client, mobile, VoIP, and wireless application security testing.
Proficiency in automated and manual application testing methodologies.
Expertise in manual testing tools such as Burp Professional, Nmap, Wireshark, Nessus, and echomirage.
Expertise in automated application scanning tools such as WebInspect, Qualys WAS, CheckMarx, and WhiteSource.
Basic knowledge of C/C++, C#, Java, and ASP.NET, and familiarity with Perl or Python scripting.
Basic understanding of secure coding principles and common coding vulnerabilities, such as the OWASP Top Ten.
Knowledge of common security requirements for ASP.NET and Java applications.
Good knowledge of TCP/IP and network security.
Hands-on experience testing projects integrated with AI.
Ability to test Android and iOS applications.
Knowledge of manual code review.
Good technical aptitude, problem-solving skills, and ability to quickly learn and master new topics and domains.
Excellent written and verbal communication skills.
1 to 6 years of experience in application security assessment.
Hands-on experience with web, thick client, and mobile application security reviews.
Exposure to and good understanding of various manual testing methodologies.
Knowledge of how vulnerabilities can lead to incidents and the role of vulnerability assessments in incident detection and response.
Understanding of application, network, and system security architecture, including security controls such as firewalls, IDS/IPS, and encryption.
Ability to multitask and prioritize duties.

Nice to have:

Bachelor’s degree or above in Information Technology, Cyber Security, or a related field.
Interest in pursuing relevant Information Security certifications such as CEH, OSCP, CISSP, CISM, or CISA.

Obowiązki

Work closely with team leads to assist with a security functional area.
Prepare detailed security review reports and remediation guidance.
Research new application security vulnerabilities and attack vectors.
Support the team in updating its skills and knowledge.
Lead strategic initiatives and mentor new team members.
Continuously improve service quality.
Configure, manage, and update vulnerability assessment tools to ensure they run optimally and provide accurate results.

EY GDS

40 aktywnych ofert

Zobacz wszystkie oferty

Aplikuj teraz