![\"http:\/\/www.mediacurrent.com\/sites\/default\/files\/styles\/article_full_width_600_\/public\/code-review-v1.5.png?itok=ehvU0mKj\"](\"http:\/\/www.mediacurrent.com\/sites\/default\/files\/styles\/article_full_width_600_\/public\/code-review-v1.5.png?itok=ehvU0mKj\")
<\/p>\n<\/p>\n
<\/p>\n
Location : Hyderabad<\/p>\n
Job Title: Sr. Analyst (Secure Code Review)
\nJob Description:
\nThe Secure Code Review service is part of the Security Testing Services Team. It is a part of Application Security testing service and is the process of identifying, documenting, and consulting on specific Application Security threats and vulnerabilities, associated likelihood and impact, and mitigating controls. Results of the assessment are documented in a report which consists of security plan, list vulnerabilities. Secure Code Review is a process to identify and assess risks present in applications using a hybrid static analysis methodology.
\nJob Profile Details:
\n\uf0fc The candidate is expected to execute\/Lead primarily Secure Code Review projects
\n\uf0fc The candidate is expected to execute\/Lead Application Security and Penetration Testing projects as well as business demands
\n\uf0fc The candidate will be expected to gain in-depth knowledge and understanding of computer applications, including various languages (i.e. Java, ASP, .NET, C++, C#, etc.).
\n\uf0fc The candidate will be involved in application architecture understanding, threat identification, vulnerability identification and control analysis
\n\uf0fc The candidate will be expected to do likelihood determination, impact analysis and risk determination.
\n\uf0fc Job would require prioritizing risk responses including solution recommendation and documentation.
\n\uf0fc Candidate will be required to demonstrate strong communication (verbal and written) and , problem solving capabilities
\n\uf0fc Selected individual will be expected to successfully comprehend large complex applications written by others from reading code and application design.
\n\uf0fc May have to handle multiple complex assignments simultaneously.
\n\uf0fc Engage with both business people and technical people within and outside the organization from a project scope definition, project execution, project closure perspectives
\n\uf0fc Communicate complex subjects in easy to understand terms and stay current with emerging technologies and industry trends
\n\uf0fc Additional knowledge of risk assessment methodologies and frameworks and how to apply them to diverse applications.
\n\uf0fc The candidate should be able to successfully lead and execute projects, mentor and train junior resources with focus on enhancing their skillsets
\n\uf0fc The candidate should be open for onsite deployments as business demands<\/p>\n
Skills required: 3+ years of Secure Code Review Experience<\/p>\n
\uf0fc Experience with web-based application development
\n\uf0fc 3 years combined experience with J2EE (servlet\/JSP) and\/or .NET (C#\/VB.Net and ASP.NET)
\n\uf0fc Knowledge of Design Patterns
\n\uf0fc Experience with relational databases from an application development perspective
\n\uf0fc Application security testing experience
\n\uf0fc Secure code review experience
\n\uf0fc Ability to handle difficult situations and to provide alternative solutions or workarounds
\n\uf0fc Flexible and creative in helping to find acceptable solutions
\n\uf0fc Experience in training and mentoring others
\n\uf0fc Good communication and writing skills with the ability to talk to both business people and technical people<\/p>\n
Preferred Skills:<\/p>\n
\u2022 Framework experience (Struts, Spring)
\n\u2022 Understanding of AJAX and web services
\n\u2022 Knowledge of application security vulnerabilities such as the OWASP Top 10
\n\u2022 Experience in Application Security Audits will be a plus.
\n\u2022 Software Maintenance Experience
\n\u2022 Security certification
\n\u2022 Developer Certifications (examples include SCWCD, SCJP, SCJD, SCJA, MCSD, etc.)
\no Basic understanding of the following protocols\/technologies:
\no SSL\/TLS
\n\u2022 Cryptography (symmetric and asymmetric encryption, PKI, etc.)
\n\u2022 Ability to work on multiple complex assignments simultaneously
\n\u2022 Ability to work alone or in groups<\/p>\n
To visit and apply:<\/p>\n
https:\/\/jobs.null.co.in\/job\/14654\/hiring-for-code-review-at-paladion-networks-at-paladion-networks\/<\/p>\n","protected":false},"excerpt":{"rendered":"
Location : Hyderabad Job Title: Sr. Analyst (Secure Code Review) Job Description: The Secure Code Review service is part of the Security Testing Services Team. It is a part of Application Security testing service and is the process of identifying, documenting, and consulting on specific Application Security threats and vulnerabilities, associated likelihood and impact, […]<\/p>\n","protected":false},"author":1,"featured_media":259,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"sfsi_plus_gutenberg_text_before_share":"","sfsi_plus_gutenberg_show_text_before_share":"","sfsi_plus_gutenberg_icon_type":"","sfsi_plus_gutenberg_icon_alignemt":"","sfsi_plus_gutenburg_max_per_row":"","footnotes":""},"categories":[5],"tags":[],"class_list":["post-158","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-job-board"],"yoast_head":"\n