Information Security Engineer Analyst - Dast - Hyderabad, Tg
- Optum
- Not Specified
- Hyderabad
- 3 years ago
- Email to a friend
- Report this job
Job Description
Combine two of the fastest-growing fields on the planet with a culture of performance, collaboration and opportunity and this is what you get. Leading edge technology in an industry that's improving the lives of millions. Here, innovation isn't about another gadget, it's about making health care data available wherever and whenever people need it, safely and reliably. There's no room for error. Join us and start doing your life's best work.(sm)
DAST team is part of the Cyber Defense Assurance program which works to minimize threat landscape by securing applications and infrastructure. DAST team is responsible to assess security posture of enterprise applications using static and dynamic security testing techniques.
During the scope of this engagement the candidate will work to perform application source code review for enterprise applications identify vulnerabilities and threats, document findings and suggest remediation for identified vulnerabilities.
Primary Responsibilities:
- Perform application security review using manual and automated testing approach
- Identify vulnerabilities in the application code, at server end, at certificate level, document findings, eliminate false positive issues
- Help development teams with remediation efforts
- Work as a consultant for the development teams to incorporate security into each phase of SDLC to transform it into Rugged devsecops
- Comply with the terms and conditions of the employment contract, company policies and procedures, and any and all directives (such as, but not limited to, transfer and/or re-assignment to different work locations, change in teams and/or work shifts, policies in regards to flexibility of work benefits and/or work environment, alternative work arrangements, and other decisions that may arise due to the changing business environment). The Company may adopt, vary or rescind these policies and directives in its absolute discretion and without any limitation (implied or otherwise) on its ability to do so
Required Qualifications:
- Undergraduate degree or equivalent experience
- Experience with web-based application development
- Experience with relational databases from an application development perspective
- Hands-on experience of using open source tools like Burp Suite, Metasploit etc.
- Hands-on experience in using licensed tools like Microfocus Web Inspect, IBM App Scan, App spider Pro/Enterprise, check marx, Fortify etc.
- In-depth knowledge and understanding of computer applications and demonstrated proficiency with development frameworks and languages (Java, C/C++, .NET, C#, PHP etc.)
- Excellent understanding of web applications, web servers, layer 7application technologies, frameworks and protocols with respect to application development and deployment
- Excellent understanding of SDLC and where automated tools fit into the process
- Technical depth and expertise in application security technologies with a deep knowledge on application security threats
- Understanding and familiarity with common code review methods and standards
- Knowledge of application security vulnerability lists such as the OWASP Top 10, SANS Top 25, CWE Top 25
- Work with development teams to carry out web application security reviews
- Improve secure coding practices, application security requirements, automation, training, and metrics
- Documentation & Reporting of vulnerabilities and suggesting mitigations
- Creating and maintaining various checklists and process documents for Web Applications and Mobile applications
- Researching and understanding various new and existing vulnerabilities and developing effective mechanisms to detect and prevent them. Maintain active understanding of industry practices for secure software development
- Ability to work independently and in a team, taking ownership of performing end to end security threat assessment and providing recommendations for rectification, for web applications
- Good written and verbal communication skills
Preferred Qualifications:
- Any of the certifications CEH, ECSA, OSCP, Developer Certifications (SCWCD, SCJP, SCJD, SCJA, MCSD etc.)
- Experience of dynamic application vulnerability assessment using tools like Microfocus WebInspect, IBM AppScan, Acunetix, Rapid7 Appspider Pro/Enterprise etc.
- Experience of mobile application source code review
Employement Category:
Employement Type: Full timeIndustry: Hotels
Functional Area: IT
Role Category: Software Engineer
Role/Responsibilies: Information Security Engineer Analyst - Dast - Hyderabad, Tg
Contact Details:
Company: OptumLocation(s): Hyderabad
+ View Contact
Fraud Alert to job seekers!
₹ Not Specified
Optum
About: OptumInsight India Pvt Ltd, a UnitedHealth group company is a leading health services and innovation company dedicated to help make the health system work better for everyone. With more than 115,000 people worldwide, Optum combines technology, data and expertise to improve the delivery, ...
Job Listings
We are in open beta version of website, please let us know if any issues, at: info(at)indigojobs.in