2 PENETRATION TESTER JOBS IN PUNE

About AXA:Axa as one of the largest global insurers, our purpose is to act for human progress by protecting what matters. Protection has always been at the core of our business, helping individuals, businesses and societies to thrive. And AXA has always been a leader, an innovator, an entrepreneurial company, fostering progress in all its dimensions. Our purpose also links back to the Group's roots. From the outset, AXA has been committed to acting as a force for collective good. From solidarity-based actions with AXA Hearts In Action to work on prevention issues with the AXA Research Fund and the fight against climate change, AXA has always been attentive to its social environment and embraced its responsibility as an insurer: responsibility for taking action upstream in order to better understand risks, with one goal in mind: to ensure better protection. Our values reflect the culture that the Group’s teams around the world live and express each day. The strength of AXA’s company culture and its outstanding managerial continuity over more than 40 years can also be seen in the proximity of its values across the various periods. Courage, Integrity, One AXA and Customer First are the four core values adopted by the Group since 2016. Our Vision is to transform AXA’s value proposition “from payer to partner”, by delivering new services complementing the traditional insurance coverage and by building new business models to increase the protection of our customers.Mandatory experience:Manual Pentesting of web application, infrastructure, mobile appExtensive knowledge in the areas of information system securityCoding ability (at the very least Python)Recognized credential on a hacking platform: training (HTB, root-me, etc.) or bug bounty (synack, hackerone, etc.)Experience in relevant tools : Burp Suite or equivalent, network discovery, vulnerability scanner, OSINT, exploitation and post-exploitation on web app, OS, infra and mobile application, payload customization, virtualization.Certifications :Offensive security : OSWE, OSCE, OSCP, OSWP, OSEE certificationEC-Council certification (APT, LPT, not CEH)Government sponsored certification : CREST, PASSIDeep knowledge in manual web application penetration testing and payload customizationExpertise in at least one programming languageExperience in working on Linux and Windows environmentCloud environment testing (AWS, Azure)Microsoft certificationCisco certificationISO 27001 certificationCISSPSANS or equivalent certificationPCI DSS certification

Job Requirements:

• Hands on experience in Application Security Testing : Vulnerability Assessment, Secure Code review
• Expertise in web application Security Testing, API Security Testing
• Hands on experience in tools like BurpSuite, Kali Linux etc
• OWASP top 10
• OWASP Secure Coding
• Proven expertise in manual penetration and exploitation skills for vulnerabilities
• Good technical presentation skills and Team collaboration skills are a must.
• Security Certifications like CEH
• Expertise in Cyber Security standards like OWASP, NIST, SANS etc
• Hall of Fame / Bug Bounty experience

Key Responsibilities: 

• Perform manual Security Testing using tools like BurpSuite, Kali Linux.
• Prepare and send detailed Reports of the vulnerabilities found on a weekly basis
• Keep up with the latest methods for ethical hacking and testing.
• Conduct API Penetration Testing
• Conduct Source Code reviews for security vulnerabilities
• Training for Devs / QA about security vulnerabilities
• Creating documents that will guide the functional QAs to do VAPT 
• Create guidelines for future projects to avoid vulnerabilities

Skills:- security testing,, Vulnerability assessment, OWASP,, Cyber Security,, NIST, and manual security testing