Hi Please let me know if you would be interested in the below mentioned position:
Please send resumes to *u...@addonusa.com <u...@addonusa.com> * *Location - San Jose, CA, 100% onsite Visa candidates: ok 12+months contract Location - San Jose, CA (San Francisco Bay Area)* *Look for locals* *Job Description* This position is for a technical penetration test Security Quality Engineer . Automation and API level testing skills are required. As a Senior Quality Engineer, you will partner with Software Developers, Product Managers, Information Security and other Quality Engineers to: *Responsibilities:* · Perform vulnerability assessments and penetration testing/ethical hacking · Perform, review and analyze security vulnerability data to identify applicability and false positives · Proficiency with Security tools like AppScan, WebInspect,Paros,Cenzic Hailstorm · Programming experience in Java, C++, Perl, or Python. · Research and develop testing tools, techniques, and process improvements · Create risk based security code reviews (static & dynamic) · Conduct penetration testing in line with Open Web application Security project (OWASP) · Publish reports and test results in line with scanners and test cases to stakeholders · Organize and execute regression reviews for applications · Handhold dev teams for vulnerability remediation with sample code snippets · Analyze product requirements, create security test plans, and perform code reviews · Mentor junior engineers to build their skills and contribution levels · Develop and present educational programs and/or workshops. · Write data-driven, white box/APIs and UI test automation · Design and modify test frameworks as required *Requirements:* · Knowledge of the nature and sources web application and database vulnerabilities, how to identify and exploit them, · Knowledge of the nature and sources network and host application vulnerabilities · Vast knowledge in computer security issues, requirements and trends · Programming experience in Java, C++, Perl, or Python. · Ability to document and track defects, as well as produce detailed reports using defect tracking tools · Experience with white-box or gray-box testing · Familiarity with software development lifecycles (SDLC) · Knowledge of Quality test techniques · Working understanding of database concepts · Agile experience is desired · Have been working in both Unix and Windows environments · Team player, able to dealing with conflict, handling ambiguity and a quick learner · Passion for breaking code and quality · Hands on experience of penetration testing is a must · Experience with Security tools like AppScan, WebInspect,Paros,Cenzic Hailstorm · BSEE, CS or other relevant technical degree required. 5+ years professional related experience or Master's Degree and 3+ years, or Doctorate and 1+ years · CEH, CISSP, GIAC certification preferred Thanks & Regards, *Uday* *Technical Recruiter* *Addon Technologies, Inc* 17197 N.Laurel Park Drive Suite 513|Livonia|MI|48152 Fax: 734-418-2603 *E mail: u...@addonusa.com <u...@addonusa.com>* *URL: www.addonusa.com <kh...@addonusa.com>* -- You received this message because you are subscribed to the Google Groups "OracleD2K" group. To unsubscribe from this group and stop receiving emails from it, send an email to oracled2k+unsubscr...@googlegroups.com. To post to this group, send email to oracled2k@googlegroups.com. Visit this group at http://groups.google.com/group/oracled2k. For more options, visit https://groups.google.com/d/optout.