Application Security Test Analyst

About Xerox Holdings Corporation

For more than 100 years, Xerox has continually redefined the workplace experience. Harnessing our leadership position in office and production print technology, we’ve expanded into software and services to sustainably power the hybrid workplace of today and tomorrow. Today, Xerox is continuing its legacy of innovation to deliver client-centric and digitally-driven technology solutions and meet the needs of today’s global, distributed workforce. From the office to industrial environments, our differentiated business and technology offerings and financial services are essential workplace technology solutions that drive success for our clients. At Xerox, we make work, work. Learn more about us at www.xerox.com.

Application Security Test Analyst

Qualification: B.E./B. Tech/M. Tech or equivalent

Experience: 4 to 6 years of experience

Join our team of Penetration Testers who think like ethical hackers, act like penetration testers and help applications to stay a step ahead.

Your Tasks include:

• Conduct web application security assessments and penetration tests.
• Assess applications for issues surrounding Authentication, Authorization, User management, Session management, Data validation, including all common attacks such as SQL injection, Cross-site scripting, Command injection, Error handling, Auditing and logging.
• Assess the security aspects of Web Services design and implementation, including confidentiality, integrity, trust relationships, and authentication using security standards like XML signatures, XML encryption, SAML, and WS-Security.
• Thick client assessment experience
• Write formal security assessment reports for each application, using Foundstone reporting format.
• Participate in conference calls with clients to perform initial data gathering and a follow-up advisory for technical issues.
• Vulnerability and network penetration assessments
• Mobile applications security testing
• Publish whitepapers, tools and deliver presentations.
• Cloud application Security testing

Required skills include:

• Knowledge of tools such as Fiddler, Paros, Burp, Sqlmap, Nikto, Nmap, Openssl, Mallory, Wireshark etc.
• Mobile application development, assessment (iOS, Android, Windows) experience
• Web application development experience in any of the major languages such as C#, Java, PHP, ASP.NET etc. is a plus
• Knowledge of scripting languages such as Python, JavaScript, Ruby, SQL etc. is a plus
• Experience reviewing code in C, C++, Java, PHP, C#, ASP.NET, Go etc.
• Familiarity with automated source code analysis tools such as Acunetix , Appscan etc.
• Certifications such as OSCP or CEH is a plus
• Working knowledge of version control software like git and Subversion.
• Can demonstrate Lexmark core values: Innovation, Excellence, Agility, Integrity, Community, and Respect.