Web Tester

new york, New York

Our client, a global Investment Bank is seeking a Web Tester to join their team. This candidate will be responsible for developing and executing formal web application security test plans to ensure the delivery of quality software applications. He/She will be involved in test planning, preparation and communication with client prior to security test execution.

Responsibilities:

  • Performs web application attack & penetration (A&P) testing to find security issue such as risks, defects and logical errors
  • Collects and analyzes security data from manual, automatic and static source review, and integrates them to find best way to address security issue to meet the needs of the business
  • Documents all issues and assists in their resolution
  • Delivers security training and education to technical staff within findings and acts as an internal security consultant to advise or influence business or technical partners
  • Provides quality web application security audits across the various IT functions to ensure quality standards, procedures and methodologies are being followed
  • Design, implement and support security-focused tools and services. 

Skills:

  • Knowledge of web application security testing Processes and Strategies
  • Working knowledge of web application security testing Tools
  • IBM AppScan/HP WebInspect
  • Burp Proxy/Zen Attack Proxy/ etc…
  • Demonstrate proficiency with OWASP
  • Demonstrate proficiency with development frameworks and languages – Java/C#/.NET/ etc…
  • Demonstrate proficiency of writing secure code.
  • 3+ years of relevant work experience conducting web application security testing of mission critical applications
  • Perform threat modeling, vulnerability analysis, penetration testing, code review and SDLC support
  • Provide expert advice and consultancy to customers on risk assessment, threat modeling and fixing vulnerabilities
  • Write technical reports based on security findings
  • BS in Computer Science or equivalent required, advanced degree (MS) and Certifications (CE|H, GWAPT, GSEC) a plus 
     

Job category:

Job keywords:

Address
Files must be less than 2 MB.
Allowed file types: doc docx pdf.

Vertical Tabs