Quality Assurance Consultant

Security Engineer / Tester - Hybrid

Genesis10 is currently seeking a Security Engineer / Tester - Hybrid for a contract to hire position with a Global Financial Institution located in Seattle, WA or Addison, TX.

As a Security Engineer/Tester, you will perform authorized security testing on complex, massive scale, and highly critical applications. This role involves working within the development team to proactively identify security vulnerabilities early in the development cycle. You will act as a liaison between the InfoSec and development teams, helping to understand and remediate security issues.

Responsibilities:

• Perform authorized security testing on complex and highly critical applications
• Work in a team-oriented and fast-paced environment
• Maintain awareness of varied application security domains like authentication, authorization, identity management, and cryptography
• Present findings to Leadership, Management, and Development teams to help them understand risks and make informed decisions on mitigations and controls

Requirements:

• 3+ years of experience in software development/testing with large-scale enterprise applications
• Primary skill in manual and automated software testing
• Deep understanding of different web application technologies, web protocols ( etc.), and browser technologies
• In-depth domain understanding of application security in terms of Identity and Access Management (IAM) and different authentication technologies
• Proven expertise on different security testing tools (Proxy tools like Fiddler, Black box security testing tools like Burp, Static Security Code analysis tools)
• Deep understanding of different application security vulnerabilities such as OWASP Top 10, SANS Top 25, CWE, and attack patterns (CAPEC)
• Bachelor's Degree in Computer Science or equivalent experience
• Must be self-directed, able to work independently, as well as work in a team-oriented and fast-paced environment

Desired Skills:

• Working experience on different security technologies and standards like Single Sign On (SSO) using SAML/OpenID, OAuth protocols, etc
• Good understanding of Cryptographic algorithms and standards like Symmetric/Asymmetric crypto techniques, digital signatures, JWS/JWE tokens, Hardware Security Modules (HSMs), etc
• Understanding of security vulnerabilities related to Cloud environments is an added advantage
• Well-known security certifications is an added advantage
• Understanding of Threat Modeling concepts and Secure Development Life Cycle processes
• Mobile Application Security familiarity is desirable

Pay range: $50.42 - $58.42 per hour

Only candidates available and ready to work directly as Genesis10 employees will be considered for this position. This role requires resources that do not require sponsorship now or in the future.

If you have the described qualifications and are interested in this exciting opportunity, please apply!