Must Have:   - 10 to 15 years of relevant experience in IT Security Management.  - Enthusiasm for the constant fight to ensure security and privacy on the internet.  - Web App Security testing using automated tools and manual testing strategies.  - Lead, mentor and manage a medium size team of 4-5 security engineers.  - Good experience of working with multiple teams and collaborating across geographically spread multi-functional teams.  - Perform Application Security Testing of Web, Mobile (iOS and Android) based applications, API and Web Services.  - Conduct penetration tests and launch exploits using Nessus, Metaspoilt, Kali penetration testing distribution tools sets.  - Research and maintain proficiency in computer network exploitation, tools, techniques, countermeasures, and trends in computer network vulnerabilities, data hiding, network security, and encryption.  - Analyze Vulnerability management scan reports and suggest remediation/mitigation plan.  - Keep track of new vulnerabilities on various network and security devices and suggest proactive controls to safeguard the organization.  - Design, implement and support VAPT solutions identified as necessary.  - Provide assessment reports that are easily understandable by the target audience and include practical and reasonable recommendations based upon sound risk management principles.  - Assess the sufficiency of policies, standards, and procedures relative to VAPT best practices.  - Mentor junior members of the VAPT group and provide constructive consultation.  Your Responsibilities will include (not limited to):  - Must have very strong conceptual and hands on experience of performing VA & PT on Web Applications, Mobile Applications, API's and Web Services.  - Strong understanding of OWASP Top 10, SANS Top25 and Secure SDLC standards.  - In- depth Knowledge and hands-on experience on Network and Infrastructure set up and security, experience in performing security configuration reviews of operating systems, Databases, Network devices, security devices, etc.  - Hands-on Experience in deployment and management of Data Loss Prevention Techniques, Security Incident and Event Management, Host Intrusion Detection Systems, Web Application Firewall.  - Good to have prior knowledge of MAC management systems such as Jamf.  - Should have proactively hardened endpoint systems of all flavor- s, preferably MAC and Linux, as well as network devices such as routers, switches etc.  - Should have extensive knowledge and hands on experience with source code review. Prior experience as a developer is good to have.  - Should be well versed with any of the scripting skills (Python/Perl/C++) with experience in exploit development.   - Should be well versed with Dynamic and Static Security Assessment tools.  - Should have experience with Cloud Security Tools and Techniques.  - Should have experience with Deployment and Management of Endpoint Security Solutions on MAC and Linux based systems.  - Strong understanding and working experience of Security Operation Centre.  - Should have prior experience of managing an Information Security Team.  - Should have proactively worked towards educating developers by taking sessions on secure source code practices and helping them for mitigating issues.  - Prior work experience with a retail organization is good to have.   Certifications:  OSCP, CISSP - Mandatory.

Bangalore

Team Lead - Security - Retail  

Team Lead - Security - Retail   ,Job Description for Team Lead - Security - Retail   in Armour Corporate Services in  Bangalore for (10-15) years of experience. Apply Now!

Job Description for Team Lead - Security - Retail   in Armour Corporate Services in  Bangalore for (10-15) years of experience. Apply Now!