Information Security Incharge

Should have experience in Mobile Application Security, VAPT and ISO 27001:2013 Implementation. Penetration testing across internal/ external networks and web applications

Strong knowledge of the OWASP, SANS top 25, WASC security Standards and detailed knowledge of common web application attack vectors such as SQL injection, CSRF, XSS, Session Management issues, Direct Object reference, Click jacking, buffer overflows, etc.

Plan, develop and execute scans for network and web-based vulnerability assessments Test security boundaries

Exploit and breakdown firewalls and Intrusion Detection Systems

Responsible for conducting VAPT and generating assessment reports

Assisting with testing of the softwares used to conduct Audits and tracking actions

Assisting with tracking and investigating information security incidents

Should not be dependent only on commercial tools, must have knowledge of open source technologies and manual testing

Should involve himself in business development activities

Should be able to interact with clients directly for acquiring business