Offensive Security Engineer(analyst Ii, Im Security) Job in Xerox

Description & Requirements

Xerox (NYSE: XRX) makes every day work better. We are a workplace technology company, building and integrating software and hardware for enterprises large and small. As customers seek to manage information across digital and physical platforms, Xerox delivers a seamless, secure and sustainable experience. Whether inventing the copier, the ethernet, the laser printer or more, Xerox has long defined the modern work experience. Learn more at and explore our

Designation:Offensive Security Engineer (Analyst II, IM Security)

Location: Kochi

Timings: 1 PM to 10 PM(IST)

Experience: 4 to 6 years

Qualification:

Education Requirements: B.E./ B.Tech./ MCA (Cyber security, Computer Science, Information Systems, or related field)

Professional Certifications:

Preferred A technical certification such asOSCP, OSWP, GPEN, GWAPT, OSCE, OSEE, GXPNor equivalent is desired.

Offensive security engineer is responsible for securing Xerox applications and networks by identifying threats, vulnerabilities using a combination of automated and manual techniques and collaborating with application teams to prioritize and remediate the vulnerabilities.

Primary Responsibilities

• Perform penetration testing on applications/products to identify security vulnerabilities
• Participate in red team exercise on web applications and network
• Continuous research on new attack vectors/techniques impacting enterprise applications/networks
• Work with cross functional teams to align and prioritize remediation efforts
• Provide technical guidance to developers on secure coding practices
• Develop secure code practices and provide hands-on training to development teams
• Develop scripts, tools, or methodologies to enhance offensive security capabilities

Knowledge and Skills Required

• 4-6 years of offensive security responsibilities
• Expertise in performing penetration testing on web, mobile, IoT and client server applications
• Experience performing automated security testing using static and dynamic scanning tools
• Prior experience participating in red team exercises
• Experience performing manual code reviews
• Prior software development experience is a plus
• Strong manual penetration testing and exploit development experience
• Knowledge of applicable industry standards, leading security practices and regulatory requirements
• Strong exposure to popular application security standards including OWASP TOP 10, SANS TOP 25 etc.
• Proficiency with at least one of the following programming languages desired: Java, .Net, C, C++, PHP
• Strong interpersonal skills as well as excellent written and verbal communication skills
• Uncompromising personal and professional integrity and ethics

Xerox is an Equal Opportunity Employer and considers applicants for all positions without regard to race, color, creed, religion, ancestry, national origin, age, gender identity, sex, marital status, sexual orientation, physical or mental disability, use of a guide dog or service animal, military/veteran status, citizenship status, basis of genetic information, or any other group protected by law. Learn more at and explore our People with disabilities who need a reasonable accommodation to apply or compete for employment with Xerox may request such accommodation(s) by sending an e-mail to [email protected]. Be sure to include your name, the job you are interested in, and the accommodation you are seeking.

2020 Xerox Corporation. All rights reserved. Xerox and Xerox and Design are trademarks of Xerox Corporation in the United States and/or other countries.