Description:
Min 3 days a week from office
with Bachelors min 8 years of experience required and min 10 Years if candidate has certification/no degree.
Key Responsibilities
Develop and execute cybersecurity test plans based on product requirements, architecture, and design specifications
Perform security validation across:
Cloud environments (AWS, Google Cloud Platform, Azure)
Backend services and APIs
Connected/IoT devices and endpoints
Analyze network traffic and troubleshoot security issues using tools such as Wireshark, OpenSSL, and proxy frameworks
Perform API security testing, traffic interception, and replay analysis using tools such as Burp Suite or Fiddler
Validate secure communication protocols, including TLS 1.2/1.3 and certificate-based authentication (mTLS)
Collaborate with development, DevOps, and security teams to identify and remediate vulnerabilities
Document test results, defects, and risk assessments clearly and effectively
Required Qualifications
Bachelor’s degree in Computer Science or equivalent experience
Strong knowledge of cybersecurity principles, tools, and methodologies
Deep understanding of TLS/SSL, PKI, and certificate management
Strong experience with Python scripting for automation and testing
Experience with cloud platforms (AWS, Google Cloud Platform, Azure) and secure architecture principles
Strong understanding of networking fundamentals (TCP/IP, DNS, HTTP/S)
Experience with Linux and Windows environments
Experience with API testing, traffic interception, and debugging tools
Proven ability to independently troubleshoot complex systems
Excellent written and verbal communication skills
Preferred Qualifications
Experience with IoT, embedded systems, or connected devices (medical device experience a strong plus)
Familiarity with Microsoft Endpoint Manager (Intune, MECM)
Experience with containerized environments (Docker, Kubernetes)
Experience with DevSecOps tools and CI/CD pipelines
Familiarity with security assessment tools (ScoutSuite, Prowler, Snyk, etc.)
Experience with test management tools (Jira, Xray)
Understanding of regulatory environments (medical device design controls is a plus)
