Job Search
We can help you build an exceptional career
Lead Security Tester Azure IRC252338
| Job | IRC252338 |
| Location | India - Bangalore, Chennai, Gurgaon, Hyderabad, Nagpur, Noida, Pune |
| Designation | Consultant |
| Experience | 5-10 years |
| Function | Quality Assurance |
| Skills | Application Security, Azure Security Expert, Security, Security & Analytics |
| Work Model: | Hybrid |
Description
Perform security penetration testing and vulnerability assessment for web and Micro services applications.
· Able to identify pre-requisites of the test environment , plan, and prioritizes the vulnerabilities based on application architecture and functionality
· Able to identify the combination of different vulnerability while execution of test scenarios/test cases
· Good knowledge of automation to be used for security testing.
. Strong understanding of cloud security practices in environments like AWS, Azure, or GCP.
· Proven experience in identifying and exploiting business logic and framework related vulnerabilities
· Vast experience in removing false positives, analyzing dynamic scan web inspect, ZAP reports
· Knowledge of Secure SDLC and Security standards like OWASP, CWE
· Provide expert advice and recommendation to the application development team
· Extensive experience in addressing WEB and API application security issues
· Strong knowledge of Application Security throughout the SDLC
· Penetration testing skills including the use of security assessment and hacker tools; e.g. ZAP, ZAP Docker, Qualys ssllabs , SSLYZE, Metasploit etc.
· Strong knowledge in OWASP TOP 10 vulnerability standards
· Strong experience in cloud technologies especially in Azure
. Familiarity with DevSecOps principles and practices, including CI/CD pipeline integration and container security.
Requirements
Perform security penetration testing and vulnerability assessment for web and Micro services applications.
· Able to identify pre-requisites of the test environment , plan, and prioritizes the vulnerabilities based on application architecture and functionality
· Able to identify the combination of different vulnerability while execution of test scenarios/test cases
· Good knowledge of automation to be used for security testing.
. Strong understanding of cloud security practices in environments like AWS, Azure, or GCP.
· Proven experience in identifying and exploiting business logic and framework related vulnerabilities
· Vast experience in removing false positives, analyzing dynamic scan web inspect, ZAP reports
· Knowledge of Secure SDLC and Security standards like OWASP, CWE
· Provide expert advice and recommendation to the application development team
· Extensive experience in addressing WEB and API application security issues
· Strong knowledge of Application Security throughout the SDLC
· Penetration testing skills including the use of security assessment and hacker tools; e.g. ZAP, ZAP Docker, Qualys ssllabs , SSLYZE, Metasploit etc.
· Strong knowledge in OWASP TOP 10 vulnerability standards
· Strong experience in cloud technologies especially in Azure
. Familiarity with DevSecOps principles and practices, including CI/CD pipeline integration and container security.
Job Responsibilities
Perform security penetration testing and vulnerability assessment for web and Micro services applications.
· Able to identify pre-requisites of the test environment , plan, and prioritizes the vulnerabilities based on application architecture and functionality
· Able to identify the combination of different vulnerability while execution of test scenarios/test cases
· Good knowledge of automation to be used for security testing.
. Strong understanding of cloud security practices in environments like AWS, Azure, or GCP.
· Proven experience in identifying and exploiting business logic and framework related vulnerabilities
· Vast experience in removing false positives, analyzing dynamic scan web inspect, ZAP reports
· Knowledge of Secure SDLC and Security standards like OWASP, CWE
· Provide expert advice and recommendation to the application development team
· Extensive experience in addressing WEB and API application security issues
· Strong knowledge of Application Security throughout the SDLC
· Penetration testing skills including the use of security assessment and hacker tools; e.g. ZAP, ZAP Docker, Qualys ssllabs , SSLYZE, Metasploit etc.
· Strong knowledge in OWASP TOP 10 vulnerability standards
· Strong experience in cloud technologies especially in Azure
. Familiarity with DevSecOps principles and practices, including CI/CD pipeline integration and container security.
We Offer
Exciting Projects: We focus on industries like High-Tech, communication, media, healthcare, retail and telecom. Our customer list is full of fantastic global brands and leaders who love what we build for them.
Collaborative Environment: You Can expand your skills by collaborating with a diverse team of highly talented people in an open, laidback environment — or even abroad in one of our global centers or client facilities!
Work-Life Balance: GlobalLogic prioritizes work-life balance, which is why we offer flexible work schedules, opportunities to work from home, and paid time off and holidays.
Professional Development: Our dedicated Learning & Development team regularly organizes Communication skills training(GL Vantage, Toast Master),Stress Management program, professional certifications, and technical and soft skill trainings.
Excellent Benefits: We provide our employees with competitive salaries, family medical insurance, Group Term Life Insurance, Group Personal Accident Insurance , NPS(National Pension Scheme ), Periodic health awareness program, extended maternity leave, annual performance bonuses, and referral bonuses.
Fun Perks: We want you to love where you work, which is why we host sports events, cultural activities, offer food on subsidies rates, Corporate parties. Our vibrant offices also include dedicated GL Zones, rooftop decks and GL Club where you can drink coffee or tea with your colleagues over a game of table and offer discounts for popular stores and restaurants!