Security Analyst - Contract - Melbourne

Requirements

• Must conduct a comprehensive Vulnerability Assessment and Penetration Testing (VAPT) on Web applications, APIs, Data Science apps(advantage)
  


• Conducting manual security testing to complement automated scans.
  


• Exploit the vulnerabilities after vulnerability scan & Classification of vulnerabilities according to agreed standard (OWASP, CVS, etc.)
  


• Reporting of vulnerabilities based on criticality after scanning and exploitation
  


• The incorporation of automated security testing tools, including SAST, DAST, and SCA, into the CI/CD pipeline.
  


•  Assistance to application team in case of any clarification required to fix identified vulnerabilities
  


• Will provide security inputs and security assessments as feasible for the below activities
  


• Experience in Manual Pentesting - Web Application, API(Minimum Requirements), Data Science apps(advantage)
  


• Knowledge in Threat Modelling STRIDE Methodology (At least basic knowledge)
  


• Experience or Knowledge in Architecture review for applications hosted in Google Cloud? (At least basic knowledge)
  


• Tools - BurpSuite, Postman, Kali Linux/Parrot OS, Linux understanding