Security Engineer

Website: www.xenonstack.com

Profile Offered: Security Engineer

Job location: Mohali, Chandigarh

Course Specialization: B.Tech/B.E. in Any Specialization, Diploma in Any Specialization

Desired Experience: 0 - 2 years

Roles and Responsibilities:
Experience in VAPT Applications, Network, and Cloud Technologies.
Proficiency in manual and automated techniques for penetration testing and executing vulnerability assessments (injection, privilege escalation, fuzzing, buffer overflows, etc.)
Ability to analyse vulnerabilities appropriately characterizes threats, and provide sound remediation advice
Familiarity with commercial testing applications (i.e. Burp, dbProtect, Acunetix, SonarQube)
Advanced knowledge of network protocols and network monitoring like "sniffing" (e.g. Wireshark, tcpdump)
Strong knowledge of tools used for Thick clients, web application, and mobile security testing.
Hands-on knowledge on OWASP top 10, SANS Top 20. Strong understanding of PCI DSS.
Coding/scripting experience (Python, Ruby, C, Assembly, Bash, PowerShell, etc.)
Work with the team to plan, prepare, execute, and summarize the security testing
Work with team in delivering and implementing consistent test disciplines and processes using associated best practices across the program.
Knowledge of debuggers, disassemblers, binary patch diffing (e.g. BinDiff).
Artful communication skills and organizational savvy, to steer peers and leadership toward solutions that carefully balance business, risk, compliance, and engineering concerns.
Eagerness to challenge the status quo, balanced with a reasonable and methodical approach to effecting change.
Security testing- Penetration security/ Infrastructure security/ cloud security/Devsecops security/ Application security.