JPC-232329 - Mobile/Web app secuirty TEsting
Job Posted: May 14, 2024 | Total views: 1

Job Description:

• Job Description

   

  Technical skillset: 

   

   

  
  
  

  • Proficient in application security review of Web, Mobile (Android and iOS), and API etc.

   

  • Ability to assess and identify any possible vulnerabilities in technology being developed prior to implementation

   

  • Good at application Security Testing like SAST, DAST and MAST experienced in web application, API Security, and mobile application security testing in conformance to various industry standards like OWASP top 10, SANS top 25 etc.

   

  • Good to have knowledge on programming and scripting skills in languages like Java, JavaScript, Angular, Spring Boot, Kotlin, and Swift etc.

   

  • Knowledge of tools like Burp Suite, Postman, SoapUI, Checkmarx, Netsparker, Nexus IQ, Kryptowire etc. to perform the security testing and analysing the scanned report

   

  • Strong grasp of application security tooling, and experience of driving automation within the delivery environment

  
  
  

   

   

  Knowledge / Experience: 

   

  ·         Industry recognised Information Security and Cyber Security qualifications is essential e.g. CISSP, CISA, OSCP, GIAC GPEN, GIAC GMOB 

   

  ·         Strong understanding of security industry trends, hot topics, commercial and vendor capability awareness 

   

  ·         Strong understanding of the security threat landscape, awareness of major historical and recent vulnerabilities, awareness of security industry responses to significant threats 

   

  ·         Strong understanding of Zero Trust security including detailed knowledge of concepts, industry whitepapers and practical implementations 

   

  ·         Educated to degree level desirable but not essential 

   

  ·         Experience supporting major programmes and other project based activities 

   

  ·         Security Architecture or Security Solution Architecture experience 

   

  ·         Experience in creating, reviewing and approving security designs 

  
  
  

  • Consistently display positive leadership behaviours related to the management and mitigation of risk, including notification and escalation of any conce
    s and ensuring timely action in relation to points raised by audit, 2LoD and exte
    al regulators.

   

  • Experience with collaboration and knowledge management tools such as SharePoint, Teams, Confluence and JIRA 

  
  
  
  

  • Hands on experience in working with DevOps and Agile teams following a secure software development lifecycle. Should be able to provide hands on leadership in improving automation and incorporating security as part of the CI/CD pipeline.

  
  
  

   

  
  
  

  • Good to have experience in application risk assessment, threat modelling

   

  • Work closely with delivery teams to develop and monitor security risk remediation programme activities and actions to ensure delivery within acceptable timelines

  
  
  

   

About Company :
Purview is a leading Digital Cloud & Data Engineering company headquartered in Edinburgh, United Kingdom having a presence in 14 countries India (Hyderabad, Bangalore, Chennai and Pune), Poland, Germany, Finland, Netherlands, Ireland, USA, UAE, Oman, Singapore, Hong Kong, Malaysia and Australia.

We have a strong presence in UK, Europe and APEC, providing services to Captive Clients (HSBC, NatWest, Northern Trust, IDFC First Bank, Nordia Bank etc) in fully managed solutions and co-managed capacity models. Also, we support various top IT tier 1 organisations (Capgemini, Deloitte, Wipro, Virtusa, L&T, CoForge, TechM and more) to deliver solutions and workforce/resources.

Company Info: