Hybrid Lead Consultant – VMS, AppSec, PT

Posted Just now

Apply now

About the role

  • Lead Consultant in Cybersecurity services at YASH, managing application security and penetration testing for clients. Collaborate with teams to enhance software development security practices.

Responsibilities

  • Assess and drive the security of different types of applications developed in client environment.
  • Work with development teams or vendors to detect, prioritize and remediate security flaws within the applications.
  • Collaborate with IT and the business to identify and implement appropriate software development related security controls.

Requirements

  • Bachelor’s or Master’s Degree (IT, Computer Science, Cybersecurity, Telecommunications, Engineering, etc.)
  • 5 -7 years equivalent experience
  • Experience with software penetration testing, architectural risk assessment, threat modelling, static code analysis and secure code review
  • Experience with network penetration testing, firewalls configuration, network architecture and security
  • Experience in manual penetration testing of websites, APIs and networks using a variety of tools and technologies
  • Strong experience with vulnerability assessment across different infrastructure components and working with resolver group to prioritize & remediate.
  • Experience in testing network isolation, escalation of privileges, authentication, expanding the attack surface and exploiting vulnerabilities
  • Experience securing applications on a myriad of platforms and languages including Java, .Net, Angular, etc.
  • Experience with a variety of testing tools, including: HCL AppScan, Burp Pro Suite, Veracode, Qualys Suite, NMAP, Metasploit, Kali Linux, Wireshark and OWASP ZAP.
  • Understanding of common Web Application vulnerabilities like XSS, CSRF, and others.
  • Experience in identifying and resolving false positive findings in assessments
  • Firm understanding of networks, operating systems and data-center architecture.
  • Familiarity with cloud technologies (IaaS, PaaS, SaaS, containers) on Google, Azure and AWS environments
  • Experience performing Red Team, Blue Team Operations is a strong plus.

Benefits

  • Flexible work arrangements
  • Professional development opportunities

Job title

Lead Consultant – VMS, AppSec, PT

Job type

Experience level

Senior

Salary

Not specified

Degree requirement

Bachelor's Degree

Location requirements

Report this job

See something inaccurate? Let us know and we'll update the listing.

Report job