Company Profile:
Founded in 1976, CGI is among the largest independent IT and business consulting services firms in the world. With 94,000 consultants and professionals across the globe, CGI delivers an end-to-end portfolio of capabilities, from strategic IT and business consulting to systems integration, managed IT and business process services and intellectual property solutions. CGI works with clients through a local relationship model complemented by a global delivery network that helps clients digitally transform their organizations and accelerate results. CGI Fiscal 2024 reported revenue is CA$14.68 billion and CGI shares are listed on the TSX (GIB.A) and the NYSE (GIB). Learn more at cgi.com.
Position: Application Security- Penetration Testing
Experience: 5-7 years
Category: Software Development/ Engineering
Shift: General Shift
Location: Chennai
Position ID: J0726-2597
Employment Type: Full Time
Education Qualification: Bachelor’s degree in computer science or related field or higher with minimum 5 years of relevant experience.
Your future duties and responsibilities
Integration of security into software development during design and development
- Analysis of IT systems architecture in terms of security and risk/threat modelling
- Contribution to the definition of the different types of security tests to be performed
- Supporting the development team in terms of secure development practices
- Supporting the infrastructure/middleware teams in terms of securization
- Performing or coordinating security code reviews and white box penetration testing during the development sprints
- Automation of security testing process
- Coordinating with the third party vendors and internal stakeholders for the penetration and black box testing
- Review and assess the results of external penetration testing, and agree corrective action
- Supporting the development teams to reproduce issues
- Research and monitor current software security risk
Contributing Responsibilities
Work with development team to prioritize vulnerabilities, assist in resolving security related issues.
Technical & Behavioral Competencies
Functional knowledge Minimum Proficiency Level
General knowledge about private banking, asset management or corporate banking Medium (at least 5 years’ experience)
Experience of a secure software life cycle in a software house or large IT department Medium (at least 5 years’ experience)
Other skills Minimum Proficiency Level
Communication skills Excellent
Team player Excellent
Analytical skills Excellent
Required qualifications to be successful in this role
Must to have Skills-
- At least 5+ years of hands-on experience doing security code analysis or reviews
- At least 5+ years of hands-on experience doing penetration and vulnerabilities tests
- At least 5+ years of hands-on experience as a software developer
- Any certification around security: GSSP-JAVA, GWEB, ECSP, CSSLP, CEH, CES etc.
Skills Referential (Required knowledge, skills and abilities)
Technical Skills:
Technical skills Minimum Proficiency Level
Security Technical Skills Medium (At least 5-8 year experience)
Knowledge and experience of common security protocols (eg. TLS, OAuth 2.0, SAML, Open ID, Connect, LDAP, etc.) and crypto libraries )Open SSL, JWT, etc) Must Have
Knowledge and experience of server side security, authentication and authorizations mechanisms Must Have
Knowledge and experience of Web security (OWASP etc.) and Javascript/SPA security Must Have
Knowledge and experience of static code security analysis and security code reviews Must Have
Knowledge and experience of vulnerabilities/penetration testing Must Have
Good to have Skills-
Knowledge of Spring Security Good to have
Knowledge of encryption and key management Good to have
Awareness of security standards relevant to SaaS and experience with Cloud platforms Good to have
Technical Development Skills Medium (At least 1–5-year experience)
Experience of CI/CD and DevSecOps Good to have
Experience with hardening of middleware (Tomcat, Apache, NGINX, Mongo DB etc.) Good to have
Knowledge of IAM and SIEM solutions Good to have
Behavioral Skills:
Creativity & Innovation / Problem solving
Communication skills - oral & written
Attention to detail / rigor
Organizational skills
Together, as owners, let’s turn meaningful insights into action.
Life at CGI is rooted in ownership, teamwork, respect and belonging. Here, you’ll reach your full potential because…
You are invited to be an owner from day 1 as we work together to bring our Dream to life. That’s why we call ourselves CGI Partners rather than employees. We benefit from our collective success and actively shape our company’s strategy and direction.
Your work creates value. You’ll develop innovative solutions and build relationships with teammates and clients while accessing global capabilities to scale your ideas, embrace new opportunities, and benefit from expansive industry and technology expertise.
You’ll shape your career by joining a company built to grow and last. You’ll be supported by leaders who care about your health and well-being and provide you with opportunities to deepen your skills and broaden your horizons.
That same commitment to fairness extends to how we use technology. To support our recruitment team, AI tools may be used to help assess applications though they never replace human judgement. All hiring decisions remain entirely in the hands of our recruitment professionals.
Come join our team—one of the largest IT and business consulting services firms in the world.
