Web Application Security

Job Title: Web Application Security
Job Location: Chicago, IL
Job Type: Contract

Key Roles and Responsibilities:

• Perform static application security testing (SAST)/code audits - automated and manual.
• Perform dynamic application security testing (DAST) - automated and manual.
• Perform root cause analysis of security vulnerabilities and apply lessons learnt.
• Review application design and architecture from a security standpoint and provide recommendations.
• Provide detailed documentation on security policies and remediation assistance.
• Assist developers in remediation by sharing security concepts and security best practices.
• Review and harden web application firewall rules.
• Threat modelling (STRIDE or equivalent methodology).

Job Contribution:

• Deep understanding of HTTP protocol spec.
• Deep understanding of security principles and security best practices.
• Basic understanding of cryptography.
• Basic understanding of TLS protocol spec.
• Basic understanding of industry best practices - PCI, OWASP, WASC, STRIDE.
• Education: Bachelors/Master's degree in the field of Computers, Engineering, or Mathematics a plus.
• Certification in OSCP/OSWE a plus.
• Contribution to open-source projects a plus.

Experience Required:

• At least 2-3 years experience in information security preferred.
• Web application development background with a strong interest in information security and relevant certification (OSCP/OSWE) acceptable.

About Us:
InterSources Inc, a Certified Diverse Supplier, was founded in 2007, offers innovative solutions to help clients with Digital Transformations across various domains and industries. Our history spans over 13 years and today we are an Award-Winning Global Software Consultancy solving complex problems with technology. We recognize that our employees and our clients are our strengths as the diverse talents and opportunities they bring to the table enables us to grow as a global platform and they are causally linked with our success. We provide strategic and technical advice, and we have expertise in areas covering Artificial Intelligence, Cloud Migration, Custom Software Development, Data Analytics Infrastructure & Cloud Solutions, Cyber Security Services etc.
We make reasonable accommodations for clients and employees and we do not discriminate based on any protected attribute including race, religion, colour, national origin, gender sexual orientation, gender identity, age, marital status.
We also are a Google Cloud partner company. We align strategy with execution and provide secure service solutions by developing and using the latest technologies that thrive our resources to deliver industry-leading capabilities to our clients and customers, making it convenient for our clients to do business with InterSources Inc. Our teams also drive growth by refining technology-driven client experiences that put the users first, providing an unparalleled experience. This results in strengthening the core technologies of clients, enabling them to scale with flexibility, create seamless digital experiences and build lifelong relationships.