Product Security Specialists

Required Characteristics:

• A minimum of 8 + years of professional experience in software development.
• Bachelor’s or Master’s degree in Computer Science, Software Engineering.
• 4+ years full-time information security experience with emphasis on technical assessment (system/web application vulnerability assessment, penetration testing, white-box code analysis, etc.) and security architecture (design of security controls, secure system design, understanding of identity and authentication management, etc.)
• Sound understanding of security technologies/techniques like Cryptography, Algorithms, Public key Infrastructure (PKI) Certificate Authority (CA), Hardware/embedded authentication, OAuth, 2-factor authentication, white-box code analysis.
• Information security experience with emphasis on technical assessment (system/web application vulnerability assessment, penetration testing, white-box code analysis, etc.) and security architecture (design of security controls, secure system design, understanding of identity and authentication management, etc.)
• Experience with Security Development Lifecycle processes such as Threat Modelling.
• Experience with a range of security tools: Nessus, Kali, Microsoft Threat Modelling Tool, etc.
• Experience with OWASP, CVSS, FIPS 140-2 and 140-3, and DoD RMF.

Good To Have Skills:

• Certification in cybersecurity.
• Experience in Agile development practices: Test Driven Development (TDD), Behaviour Driven Development (BDD) and Scrum.
• Experience in MicroServices using RESTful frameworks.
• Experience in Healthcare domain.
• Penetration Testing in Web Application, Thick Client, Mobile Application, REST/SOAP
• Infrastructure Penetration Testing
• Experience in Red Teaming Activities (add on)
• Globally recognized security Certifications (add on)
• Recognition for CVE or Wall-of-Fame though Bug-Bounty (add on)