
Software Test Engineer – Security
Salary undisclosed
Checking job availability...
Original
Simplified
- Create, execute and maintain test scenarios and attack vectors
- Run vulnerability assessments for various technologies and domains
- Ensure compliance and Industrial best practice such as SANS,NIST,RAKKSSA and CIS
- Able to conduct audits & security tests to ensure web, wireless, mobile and network security
- Actively contribute to ISO17025 implementation, maintenance and improvement of quality management system in respected field of testing.
- Responsible to report occurrence of departures from QMS or procedures related to performing test activities and report to technical lead or quality manager.
- Able to assist in closing open issues assigned and documentation changes.
Relevant Work Experience
- More than 5 years’ experience in security testing
- Understand various Test Methodologies
- Worked on any two of the following: Backtrack, Kali Linux, Metasploit, Samurai, Blackbuntu, Backbox, Webscarab, Burp Suite, Nessus, Nexpose, Acunetix, Appscan, Netsparker etc
Qualifications
- Bachelor’s Degree or Professional Degree in Computer Science / Computer Engineering / Software Engineering / Electronic & Electrical Engineering field.
Professional Qualification
- Networking related certification such as CCNA/CCNP/SCPE is a plus
- Security related certification such as CEH/CISSP/CompTIASecurity+ is a plus
Technical Skills
- Basic programming skills such as C, C++, PHP, ASP, .Net, Java, VB, Database exposure such as Oracle/MySQL and experience in using various platform such as Linux/Unix and Windows
- Basic understanding of application security including Threat Modeling, SSL / TLS, Digital Signatures, Access Control, Auditing Architectures, Application Vulnerabilities (SQL Injection, Cross-Site Scripting, Buffer Overflows, etc.), Public Key Infrastructure (PKI using RSA), Authorization Authentication, Cryptography, Password Protection, State Management (Cookies, Session), Trusted System is a plus
- Should be well versed with OWASP Top 10 and/ or SANS Top 25
- Fundamentals in Network; Protocols, Layers, Routing, Security is a must
Soft Skills:
- Able to work independently with customers/application team to define complex security issues and to deploy and configure associated applications
- Able to work under pressure and to tight time scales with a demonstrable ability to multitasking and delivering projects to tight deadlines
- Good interpersonal and communications skills
- Bachelor’s Degree or Professional Degree in Computer Science / Computer Engineering / Software Engineering / Electronic & Electrical Engineering field.
- Annual leave
- SOCSO
- EPF