Job Description

A minimum of 12 + years of professional experience in software development.
4+ years full-time information security experience with emphasis on technical assessment (system/web application vulnerability assessment, penetration testing, white-box code analysis, etc.) and security architecture (design of security controls, secure system design, understanding of identity and authentication management, etc.)
Sound understanding of security technologies/techniques like Cryptography, Algorithms, Public key Infrastructure (PKI) Certificate Authority (CA), Hardware/embedded authentication, OAuth, 2-factor authentication, white-box code analysis.
Information security experience with emphasis on technical assessment (system/web application vulnerability assessment, penetration testing, white-box code analysis, etc.) and security architecture (design of security controls, secure system design, understanding of identity and authentication management, etc.)
Experience with Security Development Lifecycle processes such as Threat Modelling.
Experience with a range of security tools: Nessus, Kali, Microsoft Threat Modelling Tool, etc.
Experience with OWASP, CVSS, FIPS 140-2 and 140-3, and DoD RMF

Good to Have:

Certification in cybersecurity.
Experience in Agile development practices: Test Driven Development (TDD), Behaviour Driven Development (BDD) and Scrum.
Experience in MicroServices using RESTful frameworks.
Experience in Healthcare domain.
Penetration Testing in Web Application, Thick Client, Mobile Application, REST/SOAP
Infrastructure Penetration Testing
Experience in Red Teaming Activities (add on)
Globally recognized security Certifications (add on)
Recognition for CVE or Wall-of-Fame though Bug-Bounty (add on).

Tata Elxsi