Precisely Hiring for Product Security Pen Tester at Pune, Maharashtra, India Full Time

Job Description

Overview:
Precisely is a global leader in data integrity, providing accuracy and consistency in data for 12,000 customers in more than 100 countries, including 90 percent of the Fortune 100. Precisely’s data integration, data quality, location intelligence, and data enrichment products power better business decisions to create better outcomes. We are looking for talented individuals with the experience and motivation to join our innovative team.

As part of our growing global Product Security team, we are looking to expand our capacity to perform internal penetration testing, Red Teaming and many other security programs across our products.
We have a large portfolio of highly varied applications, from web apps & API’s, web connected desktop apps, high volume data processing systems & middleware through to mainframes and big data platforms. Products are both internally hosted and cloud based, across AWS, Azure & GCP. You will also assist with threat modelling, analysis of security vulnerabilities, review discovered from SAST, DAST, OSA, etc. while helping the engineering teams understand how to remediate issues found and promote secure development practices.
THIS POSITION REQUIRES CANDIDATE TO WORK IN SHIFT FROM 2PM IST TO 10PM IST. Responsibilities:

• Ethically hack a wide range of products developed in house. Perform pen testing, red teaming and OSINT.
• Assist software engineering teams with configuration and running of DAST tools.
• Collaborate with software engineering teams during threat modelling.
• Review latest security technologies for testing and securing applications.
• Assist Software Engineering teams with review and remediation of security issues and promote secure software development techniques and training to teams.
• Supply expert knowledge in the fields of security, data privacy, common attack vectors and compliance with related regulations & standards.
• Mentor others within the Product Security team on hacking techniques and tools to share knowledge and findings.

Qualifications:

• 4 to 6 years of security experience.
• Proven experience with common pen testing tools such as HCL AppScan, BurpSuite, or comparable DAST tools.
• Proven usage of other open source security tools to discover vulnerabilities.
• Significant experience in pen testing or ethical hacking or web applications.
• Experience of security testing non-web applications is highly desirable.
• Proven knowledge of WAF / DDOS protection options and virtual patching techniques.
• Understanding of the OWASP Top 10 Risks, and how to test for them.
• Working knowledge of Cloud platform security (AWS ideally, Azure / GCP useful)
• Demonstrated ability to mentor others and grow the wider security testing skills with the company.

Preferred Requirements:

• Familiarity with distributed systems/applications, and scaled system/service architecture.
• CISSP, CSSLP certifications would be a plus.