Security Test Engineer jobs in Delhi at Digital India Corporation

Advt. No. DIC/API SETU/09/2024/05

Designation - Security Test Engineer

Job Summary:

As a Security Test Engineer, the candidate will be responsible for conducting security audits for web-application security, mobile app security, Network security, and IT infrastructure security as part of the audit team.
Develop and execute individual audit tasks, preparing detailed reports as required.
Conduct post-release/ post-implementation testing.
Prepare VAPT (Vulnerability Assessment & Penetration Testing) reports and assist in finalizing audit reports.

Number of Job Vacancies - 1

Essential Qualification

B.E / B.Tech (CS/IT)/ MCA

Required Experience

2-5 Years of experience in Vulnerability Assessment and Penetration testing.

Roles and Responsibilities:

Create audit plans, test cases, and scenarios for security audits. • Document testing phases and defects through logs.
Defend systems against unauthorized access, modification, and destruction.
Perform vulnerability and networking scanning assessments.
Monitor network traffic for unusual activity.
Configure and support security tools like firewalls, anti-virus software, patch management systems, etc.
Implement network security policies, application security, access control, and data safeguards.
Analyze and establish security requirements for networks.
Train employees in security awareness and procedures.
Develop and update business continuity and disaster recovery protocols.
Conduct security audits and make policy recommendations.
Provide technical security advice

Skill set:

Experienced in Vulnerability Assessment and Penetration testing.
Project management and QA methodology experience.
Ability to manually identify vulnerabilities.
Experience in web application, MobileApp, and network Vulnerability Assessment & Penetration Testing.
Familiarity with industry standard tools like OWASP ZAP, Nessus, Sqlmap, Acunetix, Nmap, Burp Suite Pro, Netsparker, etc.
Knowledge of Web Application Security standards such as OWASP/SANS.
Experience in securing API endpoints, key management, data encryption/decryption.
Regularly conducting VAPT, documenting security requirements, and implementation plans.
Handling breach events and managing systems during such events.
This position requires a candidate with strong technical skills, experience in security testing methodologies, and a proactive approach to identifying and addressing vulnerabilities.

Digital India Corporation has been set up by the ‘Ministry of Electronics & Information Technology, Government of India’, to innovate, develop and deploy ICT and other emerging technologies for the benefit of the common man. It is a ‘not for profit’ Company under Section 8 of the Companies Act 2013. The Company has been spearheading the Digital India programme of the Government of India and is involved in promoting use of technology for e-Governance, e-Health, Telemedicine, e-agriculture, e-Payments etc. The Digital India programme promotes safety and security concerns of growing cashless economy and addresses challenges confronting its wider acceptance. It also promotes innovation and evolves models for empowerment of citizens through Digital initiatives and promotes participatory governance and citizen engagement across the government through various platforms including social media.