Position: Middle Devops Engineer (Security Tester)
Company: GlobalLogic
Experience required: 2y
Category: DevOps
English level: intermediate
Published: 2020-02-01T00:00:00+02:00

This solution enables monitoring KPIs of the communication services used by the customers in close to real time manner for supporting decisions. 

Requirements
Bachelor or Master degree in Security, Mathematics or Computer Science.
Understanding information security concepts (security controls, vulnerability, exploitation, etc.)
Basic Windows and Linux OS administration knowledge
Understanding networking fundamentals (IP addressing, routing, TCP/IP protocol suite)
Python and bash scripting experience
Detailed technical knowledge of techniques, standards and state-of-the art capabilities for - authentication and authorization, applied cryptography, security vulnerabilities and remediation
Vulnerability and threat management experience
Knowledge of web related technologies (Web applications, Web Services, Service Oriented Architectures) and of network/web related protocols
Dynamic application security testing principles
Web penetration testing experience
OWASP testing methodology
Tools: Nessus, OWASP ZAP, Metasploit, Burp Suite
Fuzzing (preferablу)

Preferences
Fuzzy Logic Control
Metasploits Framework
Burpsuit proxy tool

Responsibilities
Discovery vulnerabilities in web applications
Perform vulnerability assessment
Provide mitigation recommendations
Automate vulnerability management processes