Software Engineer - Security Testing

i2c Inc · India

• Perform security analysis of application logs to detect anomalies and malicious activity.
• Conduct vulnerability assessments for web, mobile, and API platforms, focusing on industry best practices.
• Execute security testing aligned with OWASP Top 10, identifying common threats such as XSS, SQLi, CSRF, etc.
• Analyze and remediate infrastructure-level vulnerabilities in coordination with relevant teams.
• Escalate critical risks and security issues to stakeholders for timely mitigation.
• Curate and assess vulnerability data from multiple tools, validating results and eliminating false positives.
• Provide clear and actionable remediation guidance, both in written reports and verbal communications.
• Evaluate the business impact of identified vulnerabilities and advise on risk prioritization.
• Reproduce and validate vulnerabilities to confirm legitimacy and potential exploitation paths.
• Create detailed security reports highlighting vulnerabilities, risk levels, and recommended fixes.
• Assist in developing and configuring automated tools and scanning solutions to optimize testing workflows.
• Ensure adherence to PCI DSS and other relevant compliance standards during assessments and design reviews.
• Collaborate with development and engineering teams to promote secure design and implementation practices.
• Support team members by resolving technical challenges and sharing expertise.
• Mentor junior team members, fostering knowledge sharing and continuous improvement.
• Participate in defining and improving security testing processes and workflows.
• Conduct ongoing research on emerging vulnerabilities, tools, and security trends to stay ahead in the field.