Sr. Engineer (security Testing) Job in Spiderfocus Solutions

Job Description : Experienced in reviewing technical designs and functional requirements to identify areas of Security weakness. Should have worked on Threat modelling. Should have ability to map threats and vulnerability, articulate to business owners the impacts and risks. Good knowledge and experience on Security - Cloud, Infra, Firewalls, Routers, Wi-Fi, Embedded Devices and IOTs. Should have experience in IOT Pen testing methodologies, Firmware Penetration testing and Radio Security Analysis. Have experience with penetration testing related tools and techniques. Manual testing must be an area of expertise, not simply automated scanning. Good knowledge of security standards like OWASP, CWE, NIST, OSSTMM. Must have previous background in programming, design and/or application architecture in C, C++ and Java. Scripting skills (such as: Python, JavaScript, Shell Script, Perl, Bash, Ruby, PowerShell, etc.) will be an added advantage. Should be able to evaluate cloud environment configurations, such as bucket policies, IAM policies, security groups and ACLs, for security vulnerabilities and integrating these findings into the pen test. Should have an understanding of GDPR and ISO/IEC 27032 standards. Experience in integrating Security Tools with CI/CD Pipeline. Excellent oral/written presentation skills with ability to communicate effectively with leadership; proficiency in ability to prepare presentations, analysis reports, and program status reports. Ability to work with a high degree of autonomy. Additional advanced technical degrees or cybersecurity-based certifications such as CISSP, OSCP, CEH, or GIAC certifications would be preferable.