Senior Security Test Engineer

Segment: S&P Global Market Intelligence The Role: Senior Security Test Engineer The Team: The team is responsible to protect applications & product within the company which are built to empower the markets, the responsibility includes the team to protect from bad actors & making sure security hygiene is encompassed in the software development. The Impact: This role would be responsible for running Static & dynamic scans within the SDLC, resource would also be responsible for working with developers to deliver business functionality on time with required quality that meets the acceptance criteria. What’s in it for you: S&P’s environment gives a greater exposure to cutting edge technologies which the applicant could benefit for career progression, the work environment is very flexible. Responsibilities: Design, Create and execute penetration tests on Web, Mobile and Infrastructure Perform static and dynamic analysis on customer facing applications, websites, and large enterprise networks Work with internal and external stakeholders to deliver high quality penetration tests Provide reports that clearly articulate vulnerabilities and weaknesses to clients Create tools and frameworks with quality code to simplify testing scenarios Design and develop Security  test plans, test cases, execute test cases, analyze and report test results to the teams Work in partnership with the development teams to deliver business functionality on time with required quality that meets the acceptance criteria Involved in requirements review and participate in architecture/design reviews with an emphasis on security test strategy and ensuring best practices What We’re Looking For: Develop and execute Penetration Tests for various platforms Relevant skills to conduct penetration testing in the following domains: Application, Infrastructure, Mobile (iOS, Android), Wireless, Physical assessment and Code review A consistent record of discovering, analyzing, and exploiting application vulnerabilities and misconfigurations on Windows and Linux platforms 3+ years’ experience in Information Security Role 3+ years’ experience in performing security penetration testing Experience in developing custom tools when necessary Must have 2+ years of Commercial Web Application Tool Experience (i.e. Burp, AppScan, WebInspect…….) The ability to work with stakeholders throughout the vulnerability lifecycle to communicate issues and provide remediation guidance Provide regular assessment progress updates that include sufficient detail to convey work completed and upcoming activities Provide subject matter expertise in support of security incidents/investigations as required. Knowledge of web application full-stack architecture and network models. Demonstrate technical competency in security engineering based on hands-on experience or relevant qualifications Experience in programming using Python/C
/Java/Java Script or other languages Strong communication skills and ability to produce clear, concise and detailed documentation Excellent problem solving, analytical and technical troubleshooting skills Bachelor's or higher qualification in Computer Science, Information Systems or equivalent is preferred. Grade: 10A The Location: Gurgaon About S&P Global Market Intelligence: S&P Global Market Intelligence partners with customers to broaden their perspective and operate with confidence by bringing them leading data sources and technologies that embed insight in their daily work. ----------------------------------------------------------- Equal Opportunity Employer S&P Global is an equal opportunity employer and all qualified candidates will receive consideration for employment without regard to race/ethnicity, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, marital status, military veteran status, unemployment status, or any other status protected by law. Only electronic job submissions will be considered for employment. If you need an accommodation during the application process due to a disability, please send an email to: [email protected] and your request will be forwarded to the appropriate person.  US Candidates Only: The EEO is the Law Poster http://www.dol.gov/ofccp/regs/compliance/posters/pdf/eeopost.pdf describes discrimination protections under federal law. ----------------------------------------------------------- IFTECH202.1 - Middle Professional Tier I (EEO Job Group) Job ID: 274100 Posted On: 2022-06-01 Location: Gurgaon, Haryana, India