Security/CEH/CISSP

 Good understanding of OWASP Top 10 & OWASP Mobile Top 10with practical skills to perform secure code reviews, dynamic security assessments
& At least 5 years of experience in .net with Web API development and Web Security profiling

• Very good experience in Azure/.Net applications, C#, web API programming, Java scripting

• REST API Concepts, Verbs, difference between Verbs, Design Patterns

• Good knowledge in Dependency Injections, Factory Patterns and Singleton, Multi-threading in Web API Security

• Experience in Performance difference between SOAP , REST API and React JS and JQuery

• Good understanding of Android /iOS programming constructs & Dynamic security assessment exposure

• Good Understanding of Secure DevOps integrations

• Proactive attitude to deal with volumes of flags and larger applications with accuracy to detail while scoping, configuring scans.

• Ability to be multi-tasking and meet the timelines/SLA.

• CEH certification/Security+  is mandatory with minimum of 2+ yrs
of experience

• Hands on ability to generate POC for flags, interpret findings and facilitate remediation assistance with moderate/less supervision. 

• Ability to perform mobile security assessments (static/dynamic) will be added advantage.

• Predominant technology land-scape for app-security was 60% of .Net apps, 25% of Java, 15% of mix of different technologies
Hence ability to interpret programing constructs are mandatory.

• Good communication and written skills is mandatory (As our analyst has to speak with dev
Teams across Humana with business folks spanning from different time zone) 

• Expected to work in regular work schedule (9.30 – 6.30 PM) with set expectation to work on morning or afternoon shift based, if any required (rarely).

• Ability to work with enterprise security tools IBM Appscan Source/Standard, Cigital SecureAssist, BurpSuite pro etc.

• Remediation Assistance for both App& Mobile security with wide variety of programming languages on different platforms

• Security/CEH/CISSP preferred with hands-on expertise to deal with multiple stakeholders