Static Application Security Testing (SAST)

Project Role : Security Engineer

Project Role Description : Apply security skills to design, build and protect enterprise systems, applications, data, assets, and people. Provide services to safeguard information, infrastructures, applications, and business processes against cyber threats.

Must have skills : Static Application Security Testing (SAST)

Good to have skills : NA

Minimum 3 year(s) of experience is required

Educational Qualification : BTech MTech MCA BSc Computers

Summary:

Identify Malware and Security Breaches in Chrome Extensions to ensure safe browsing experience.

Deep Code review and Dynamic analysis to identify malwares within the extension, using advanced debugging. Detection of code injection and execution techniques using different chrome tools/plugins. Identify social engineering attacks and Advanced De-obfuscation skills. Perform impact analysis for identified malware, possible variants and fix recommendation. Validating the extensions that were escalated / reviewed by the reviewers. Perform quality audits, work on bugs & take process related sessions. Responsible for driving quality improvements.

Roles & Responsibilities:

1. Audit transactions/items processed by associates.

2. Feedback sharing on errors identified.

3. Active participation in Client sessions & Query sessions weekly/monthly/requirement basis

4. To identify training needs & requirements

5. Conduct refreshers, error review sessions to address the doubts / clarifications.

6. Share feedback with associates on client triggered interventions.

7. Conduct and manage PKT (Process Knowledge Test)

8. Prepare RCA (Root Cause Analysis) on monthly basis.

9. Come up with process improvement ideas.

Technical experience:

1. Advance knowledge on languages like Java, HTML, CSS, JavaScript, jQuery, AJAX & AngularJS, NodeJS

2. Good understanding of cryptography concepts and Obfuscation

Additional Information:

1. BTech, MTech, MCA or BSc Computers

2. Minimum 4+ years of experience as Web developer or Security Analyst