#13348 - Security Test Architect - United States - Remote

Are you interested in working with the World’s leading AI-powered Quality Engineering Company?

Qualitest is looking for a Security Test Architect to join our growing Healthcare team in United States.

Position Overview

• 8 to 12 years of experience*
• Minimum 6+ years of experience on cyber security testing
• Experience on defining Security Testing Strategy, identify tools and technologies and implementing it
• Experience working on Cloud environment and validating cloud security architecture (AWS/ Azure/ GCP)
• Experience on performing penetration testing on web, mobile and APIs
• Experience on setting up SAST (Static Application Security Testing), SCA (Software Composition Analysis) and DAST (Dynamic Application Security Testing) solutions as part of DevSecOps
• Experience on performing SAST, SCA and DAST scans using different toolsets (SAST – Veracode/CheckMarx/Fortify/SonarQube, DAST- BurpSuite, ZAP, Nexploit, Acunetix, SCA – OWASP Dependency Check, CheckMarx, Veracode, Black Duck)
• Experience on conducting false positive and false negative analysis as part of SAST, DAST and SCA
• Good knowledge on Cloud Security testing tools like Prisma Cloud and security risk intelligence tools like Nexpose
• Experience on ISO 27001, GDPR, PCI DSS compliance testing
• Experience on working closely with development team and the InfoSec team for implementing cyber security solution
• Strong knowledge on one of the programming languages (Java/C#/Python)
• Good knowledge on frameworks (Angular/React/ Node/Spring/ Spring Boot)
• Experience on identifying cyber security requirements by working closely with the InfoSec team
• Experience on security testing mobile applications (Android and iOS) and other thick client applications
• The Cloud certifications like AWS Certified Security – Speciality/Azure AZ-500 or other security certifications like OSCP, OSCE, CREST, CISSP is good to have
• Strong knowledge on containerization and orchestration tools like Docker, Kubernetes, Rancher
• String knowledge on one of the infrastructure-as-code tools - …