Role:  Lead, Pen Tester

• Be an individual contributor in the field of Penetration Testing
• Work closely with other Penetration testers
• Report to CoC Head of Testing and Information Security
• Understand companies’ security policies, standards and guidelines and their implementation in local locations
• Be an active member of the Global Application Security Assessment Core Group
  • Regular participation and
  • Contribution of best practices and techniques
  • Improvisation of overall service, globally
  • Improve security policies, standards and guidelines.
• For Applications under test:
  • Identify Security Testing requirements of the application under test
  • Execute penetration test on the application in different environments/test conditions
  • Review/consolidate findings from other Pen-testers
  • Validate and prioritize the issues identified with
  • Prepare assessment reports and management summary
  • Clarify/assist the development team to resolve/mitigate security vulnerabilities identified
• Strategize and improve current process, develop best practices and create check lists for ensuring highest quality Penetration testing
• Assist development team in building secure applications/products through increased awareness
• For application under development at the centre,
  • Develop Test Strategy and Plan to test all security testing requirements of the project
  • Design penetration test to validate security requirements of the application
  • Carry out threat modelling for applications/products to test for security during development

• Coach/mentor the other development to peers in competency especially in the fields of secure coding, secure design and architecture
• Should be Self-motivated and innovative with strong problem-solving skills
• Should be self starter and handle complex
• Have initiative to learn / propose best practices, ideas to improve the application

EXPECTED

(To be filled by MBRDI)

Total Experience: 6- 10 Years

Main Skills

Skill

Penetration Testing

Threat Modelling

Secure SDLC

Secure Code Review