Job Description
:
Perform SAST/SCA/DAST scans using industry vulnerability scanner
SAST/SCA – Veracode, using supplied compiled binary, configure scan platform to correct scan for both static code CWE’s as well as SCA derived CVEs. Work will include coordination with app owner to ensure all branches of code are included in compiled binary file.
DAST – Work begins with crawling the target application to identify existing directory and file structure. Once identified, execute DAST scan using HCL product to identify dynamic issue only visible during code execution.
During testing process, tester MUST ensure application is not degraded and/or taken out of service due to scanning activities
Tester must ensure results from scanner are present in VM reporting platforms and visible to approved app users
Validation - Supplier will perform manual validation and false-positive analysis on the automated scan results.
Remediation Support: The remediation support will analyze the top-rated vulnerabilities along with provide support to application teams on remediation strategies from identified risks.
Scan Retest: Supplier will perform revalidation tests of previously identified critical and high severity vulnerabilities as requested by the client application teams.
Complex application testing and remediation/mitigation recommendation author
Technical leadership of group of less experienced testers.
Adversary based approach to test plan development
Attempt to access unauthorized data
Attempt to make unauthorized changes
Bypass business logic, authentication, user privileges, etc..
Hijack accounts (Does not include social engineering methods)
Attempt to exploit OWASP Top 10 vulnerabilities
EcoSystem Testing
All forms of application security testing, attempt to exploit
All forms of device security testing, attempt to exploit
All forms of database security testing, attempt to exploit
Full Stack review, weakness enumer
#Cybersecurity
Weekly Hours:
40
Time Type:
Regular
Location:
Bangalore, Karnataka, India
It is the policy of AT&T to provide equal employment opportunity (EEO) to all persons regardless of age, color, national origin, citizenship status, physical or mental disability, race, religion, creed, gender, sex, sexual orientation, gender identity and/or expression, genetic information, marital status, status with regard to public assistance, veteran status, or any other characteristic protected by federal, state or local law. In addition, AT&T will provide reasonable accommodations for qualified individuals with disabilities. AT&T is a fair chance employer and does not initiate a background check until an offer is made.
Associate Lead, Cybersecurity • Dallas, TX, US
An exciting opportunity awaits for a PayPal Risk Operations Associate to perform daily responsibilities with dedication.Provide excellent interactions with customers and colleagues.Stay adaptable i... Show more
Hilltop Securities is looking to hire a Risk Analysis Associate.The Risk Analysis Associate is part of the Strategic & Risk Management team that helps build a robust governance framework to manage ... Show more
THIS POSITION IS NOT ELIGIBLE FOR VISA SPONSORSHIP What You'll Do:Join our dynamic Security Engineering team as a Lead Associate Principal and make a significant impact on our organization's cybers... Show more
Investment Associate, Data Center Transactions.At Prologis, we don't just lead the industrywe define it with a 1.We create the intelligent infrastructure that powers global commerce, seamlessly con... Show more
Kroll's Portfolio Valuation practice is the leading provider of valuation advisory services to the alternative investment industry.We boast a prestigious clientele of the world's leading alternativ... Show more
Across Wealth Management, Goldman Sachs helps empower clients and customers around the world to reach their financial goals.Our advisor-led wealth management businesses provide financial planning, ... Show more
Alliance Sales Executive, Associate Director, Snowflake - Consumer & Health and TMT.Location: New York Other locations: Anywhere in Region Salary: Competitive.At EY, we're all in to shape your futu... Show more
Senior Principal Risk Specialist, Cyber Engagements.About FINRA FINRA (Financial Industry Regulatory Authority) is the largest independent regulator of securities firms doing business in the United... Show more
Cyber Defense And Resilience Team Member.Deloitte's Cyber Services help our clients to be secure, vigilant, and resilient in the face of an ever-increasing array of cyber threats and vulnerabilitie... Show more
Industrial Cybersecurity Senior Consultant.Industrial Cybersecurity Senior Consultant manages or contributes to technical consulting projects and implementation services for critical infrastructure... Show more
Goldman Sachs' Risk Division develops comprehensive programs and processes to identify, monitor, assess and manage financial and non-financial risks in support of the firm's risk appetite statement... Show more
Job Title: Deal Desk Manager - North America.At Palo Alto Networks, we're united by a shared missionto protect our digital way of life.We thrive at the intersection of innovation and impact, solvin... Show more
Are you ready to make an impact at DTCC?.Do you want to work on innovative projects, collaborate with a dynamic and supportive team, and receive investment in your professional development? At DTCC... Show more
Associate Director, Enterprise Services Customs Operations.RTX has a rare opportunity for an Associate Director, Enterprise Services Customs Operations.You will report directly to the Senior Direct... Show more
Senior Analyst/ Associate/ Manager, Trade Receivable Securitization.Location: Fully Remote (with travel).Travel to borrower locations within the U.Intel: Look for candidate with KPMG experience.Sen... Show more
Associate Director Diversified Industries PM.The Associate Director Diversified Industries PM is responsible for the management of a portfolio of commercial loans with a focus in complex middle m... Show more
Senior Associate, Risk Advisory Group.In today's dynamic environment, business leaders face constantly shifting risks.Riveron helps organizations implement leading governance, risk and compliance p... Show more
We are a provider of specialized fund administration services for Managers and General Partners of private equity funds, specifically: Buy?out, Venture Capital, Real Estate and Fund?of? Funds.For n... Show more
Houlihan Lokey Investment Banking Associate.NYSE:HLI) is a leading global investment bank recognized for delivering independent strategic and financial advice to corporations, financial sponsors, a... Show more
Boston; Chicago; Dallas; New York.We are the better way to work in finance.As private equity's value creation partner, we sit at the heart of PEwhere sponsors and CFOs meet.Through financial consul... Show more
