Software Pentester
Core
Secure software applications and infrastructure from vulnerabilities, drive product privacy and cybersecurity features, and implement DevSecOps across the product line.
Role type
Senior Software Pentester (Security Engineer)
Builds
Secure R&D applications, cloud-based server architectures, and unified electrical digital twin platforms
Domain
Cybersecurity / Electrical Engineering Software
Required skills
Software application penetration testing, DevSecOps, Threat modelling, Risk assessment, TCP/IP and OSI model, SAST/DAST integration, SIEM log analysis, SSO methodologies (SAML, LDAP, OpenID), Cloud security (AWS), Security assessment tools (BurpSuite, Nessus, ZAP, etc.)
Preferred skills
CEH, OSCP certifications
Technologies
C#, Perl, JavaScript, Python, PHP, Kubernetes, Docker, HP Fortify, Puppet, Chef, ThreatModeler, Checkmarx, Aqua, NESSUS, NMap, BurpSuite, ZAP, OWASP tools, Kali Linux, Fuzzing tools
Responsibilities
Assess architectures and designs for security vulnerabilities and suggest/implement alternatives; Oversee management and remediation of identified security flaws; Build and maintain monitoring, auditing, and reporting frameworks; Drive VAPT activities for multiple R&D applications; Integrate SAST and DAST platforms into CI/CD pipelines
Seniority
Senior, hands-on IC
