Job Detail

Experience in Cybersecurity audit, VAPT , regulatory compliance, GRC, SOC, SIEM , audit. 
•              Key Skills: Vulnerability Assessment ,Penetration Testing , Security Audits & Compliance, Reporting & Remediation, VAPT tools, internal audits,  enforcement of security strategies & error handlings well versed in Microsoft Office (MS Office). 
•              Role Requirements: The resource will be responsible for supporting regulatory or internal audits, ensuring compliance with applicable standards, and assisting in the enforcement of security strategies across the organization.

 

 

Job description

 

Cyber security lead

 

Experience 3 - 7 years of professional experience in Cybersecurity audit VAPT regulatory compliance

Key Skills Expertise in VAPT account creation ID management regulatory compliance internal audits and enforcement of security strategies Pen testing report error handlings well versed in Microsoft Office MS Office

Role Requirements The resource will be responsible for supporting regulatory or internal audits ensuring compliance with applicable standards and assisting in the enforcement of security strategies across the organization

Note The resource will work with clients from Mumbai HSBC Nesco Goregaon office

 

 

Skills

 

Mandatory Skills : Estimation,Application Security - Microfocus Fortify-SCA and SAST,Application Security - Microfocus Fortify DAST,Network PT,Attack Surface Management,Breach Attack Simulation,Red Teaming,Mobile Security - MAST Tool Implementation/ Dynamic Analysis (Penetration Testing)/ Static Analysis (Static Code Analysis)/ Remediation Advisory/ Tool Selection,Architectural diagrams,Application Security - Black Duck/ Sonartype IQ,Application Security - Burp Suite,Application Security - Checkmarx/ Synopsys / Veracode,Application Security - Rapid 7 (InsightAppSec),Application Security (application security framework/ threat modelling/ Secure SDLC/ DevSecOps/Application Security Architecture Review),Application Security DAST & Penetration Testing - review/ Implementation/ Scanning/ Secure Code Review/ OWASP/ Remediation Advisor/ Secure SDLC,Application Security SAST & SCA Tool - review/ Implementation/ Scanning/ Secure Code Review/ OWASP/ Remediation Advisory/ Secure SDLC,Application Security SAST and IAST - CheckMarx,Architecture Assessment,Architecture Governance,Capacity Planning,Compliance Evaluation,Cost Benefit Analysis Method,Devsecops /Appsec Automation / Appsec Maturity Program,DevSecOps automation - Jenkins, Ansible. Terraform, GitLab,Infra Vulnerability Management - Qualys,Infra Vulnerability Management - Rapid 7,Infra Vulnerability Management - Tenable IO,Infra Vulnerability Management - Tenable Nessus, SC, CS,Infra Vulnerability management/Triaging/ Remdiation Advisory / ServiceNow /ITSM /CMDB,Metasploit,Red Teaming - FireCompass,BaS - Cymulate,PT - Horizon3,PT - VA/ Discovery/ Enumeration/ Reconnaisance/ Scanning/ Manual/ Exploitation/ Analysis/ Reporting/ Zero Day/ corrective action/ Strategy,PT - Network PT/ Red Teaming (Internal and External)/ Attack surface management/ /Breach Attack Simulation/Mitre Attack - Discovery/ Enumeration/ Reconnaisance/ Scanning/ Manual/ Exploitation/ Analysis/ Reporting/ Zero Day/ corrective action/ Strategy,Application Security - Microfocus Fortify

Other Details