Total 2 job vacancies by Opensource Pte. Ltd.

Responsibilities:

• Develop and document clear and well-targeted test cases to be used by yourself, other QA testers based on Business Requirements, current System functionality and Functional Specification/ Narratives.
• Defines complete level of test scenarios and variations in data to adequately perform end to end testing.
• Thoroughly test multiple functionalities and document the results by capturing end to end testing steps during execution.
• Submits defects and issues to development for correction, and retests once errors have been corrected following established procedures.
• Tracks defects and causal analysis to closure.
• Ensures that testing is completed on schedule.
• Closely collaborate with development team and business users throughout the entire project.
• Use analytical and problem-solving skills to recognize and reduce redundancies in testing efforts, minimize complexity, and create efficiency without compromising effectiveness.
• Effectiveness to work both independently and within a team environment. with tight deadlines and changing priorities
• Working with vendors and product owners and End Users within organization.

Support Test Manager to oversee respective SG Finance testing activities

Requirements:

• Candidate should possess at least a Diploma or Bachelor's Degree or equivalent.
• At least 1-3 years of experience in the field of software Quality Assurance, preferably in Banking domain.
• Proficient with Microsoft Office applications.
• Familiar with Software Testing Development and Testing methodology, especially Agile.
• Experience in using JIRA tool or SQL will be considered favorably.
• Pro-active, independent, resourceful and able to work in a team
• Experienced in Test Automation

Location : India (work from anywhere)

Job Description & Requirements

4 to 5 years of experience in vulnerability assessment and penetration testing (VAPT) of applications

Strong knowledge of the OWASP, SANS top 25, WASC security Standards and detailed knowledge of common web application attack vectors such as SQL injection, CSRF, XSS, Session Management issues, Direct Object reference, Click jacking, buffer overflows, etc.

Experience in performing application security testing using manual techniques and automated tools along with runtime vulnerability testing tools.

Experience in static and dynamic secure code review.

Experience in manual application penetration testing of thick client applications, mobile applications, web services, APIs etc.

Thorough understanding of common web technologies like .NET, PHP, Java, XML, SAML, SOA, SOAP, web services etc and protocols including HTTP(S), DNS, FTP, SSH etc.

Should have performed manual mobile application penetration testing on platforms like Android, IOS etc.

Should have knowledge on Risk Rating Standards like DREAD, CVSS etc.

Experience in VA/PT of networks, servers, devices etc.

Good understanding of web application architecture and Secure development life cycle(SDLC).

Experience in threat modelling and risk analysis.

Understanding of software development methodologies such as waterfall, Rational Unified Process and Agile software development.
Experience in automated web application vulnerability scanners (e.g., AppScan, Web inspect, Accunetix, Burpsuite Pro, etc) is desirable

Preferred certifications: OSCP, CEH

4 to 5 years of experience in vulnerability assessment and penetration testing (VAPT) of applications

Strong knowledge of the OWASP, SANS top 25, WASC security Standards and detailed knowledge of common web application attack vectors such as SQL injection, CSRF, XSS, Session Management issues, Direct Object reference, Click jacking, buffer overflows, etc.

Experience in performing application security testing using manual techniques and automated tools along with runtime vulnerability testing tools.

Experience in static and dynamic secure code review.

Experience in manual application penetration testing of thick client applications, mobile applications, web services, APIs etc.

Thorough understanding of common web technologies like .NET, PHP, Java, XML, SAML, SOA, SOAP, web services etc and protocols including HTTP(S), DNS, FTP, SSH etc.

Should have performed manual mobile application penetration testing on platforms like Android, IOS etc.

Should have knowledge on Risk Rating Standards like DREAD, CVSS etc.

Experience in VA/PT of networks, servers, devices etc.

Good understanding of web application architecture and Secure development life cycle(SDLC).

Experience in threat modelling and risk analysis.

Understanding of software development methodologies such as waterfall, Rational Unified Process and Agile software development.
Experience in automated web application vulnerability scanners (e.g., AppScan, Web inspect, Accunetix, Burpsuite Pro, etc) is desirable

Preferred certifications: OSCP