Oracle
Senior Application Security Analyst
Job Description
As a member of our team, you will be responsible for planning and delivering in depth security assessments across a variety of products and services.
What We’ll Give You
- A team of very skilled and diverse personnel across the globe
- Ability to work in a flexible work from home arrangement
- Exposure to mind blowing large-scale cutting-edge systems
- The resources of a large, global operation while still having the small, start-up feel of a smaller team day to day
- Develop new skills and competencies working with our vast cloud product offerings
- Ongoing extensive training and skills development to further your career aspirations
- Incredible benefits and company perks
- An organization filled with smart, enthusiastic, and motivated colleagues
- The opportunity to impact and improve our systems and delight our customers
Nice to Have
- Experience working in a large cloud or Internet software company
- Proficiency with one or more programming languages, preferably Go, Java, Python or C/C++
- Ability to perform manual source code reviews in one of the aforementioned languages, or assisted review with code analysis tools such as CodeQL
- Experience navigating and working with extremely large codebases is also highly desirable
- Experience using common security assessment tools and techniques in one or more the following categories:
- Proficiency in performing mobile application assessment (iOS / Android)
- Reverse Engineering (e.g. IDA Pro/Ghidra/Radare2) and debugging codebase with the objective to find security gaps/vulnerabilities
- Proficiency in Fuzzing (e.g. Jazzer/AFL/Peach) techniques to inject invalid, malformed, or unexpected inputs into a system to reveal software defects and vulnerabilities.
- Proficiency in advanced Mobile, API, Infrastructure, Web Application penetration testing to find vulnerabilities such as insecure Java/PHP/PHAR deserialization, XXE, HTTP desynchronization, cryptography weaknesses (exploiting ECB Shuffling, CBC Bit Flipping and etc.), Mass assignments, template injections, HTTP/2 and HTTP/3 protocol issues and etc.
- Knowledge of common vulnerabilities in different types of software and programming languages, including:
- How to test for/exploit them
- Real world mitigations that can be applied
- Familiarity with vulnerability classification frameworks (e.g. OWASP Top 10)
- Ability to threat model systems/applications/platforms to assess design and find flaws that can be exploited
Career Level - IC3
Jobs at Bengaluru
Amazon
Software Development Engineer - Dyn…
Freshers/Experienced
Bengaluru, Karnataka
Last Date: Feb. 4, 2025
Amazon
Devops Engineer, Product Replenishm…
Freshers/Experienced
Bengaluru, Karnataka
Last Date: Feb. 4, 2025
Oracle
Principal Engineer - OCI,FMW, ONM, …
Professional
Bengaluru, Karnataka
Last Date: June 18, 2025
Oracle
Oracle Warehouse Management System …
Professional
Bengaluru, Karnataka
Last Date: Feb. 9, 2025
Oracle
Full Stack Developer-PLSQL /Java
Professional
Bengaluru, Karnataka
Last Date: July 6, 2025
Oracle
Senior Software Developer
Professional
Bengaluru, Karnataka
Last Date: Feb. 3, 2025
Oracle
10530.Software Developer 3.IC3
Professional
Bengaluru, Karnataka
Last Date: May 31, 2025
Oracle
Senior Software Developer
Professional
Bengaluru, Karnataka
Last Date: May 4, 2025
More Jobs at Oracle
Oracle
Senior Principal Consultant
Professional
Bengaluru, Karnataka
Last Date: March 3, 2025
Oracle
Modern Data Platform Architect
Professional
Bengaluru, Karnataka
Last Date: May 10, 2025
Oracle
Managing Principal Consultant
Professional
Noida, Uttar Pradesh
Last Date: Feb. 16, 2025
Oracle
Principal Software Engineer
Professional
Hyderabad, Telangana
Last Date: Feb. 3, 2025
Oracle
Software Developer 4
Professional
Bengaluru, Karnataka
Last Date: April 23, 2025
Oracle
Software Developer 5 (Java Fullstac…
Professional
Noida, Uttar Pradesh
Last Date: April 23, 2025
Oracle
Associate Consultant : HCM Function…
Professional
Bengaluru, Karnataka
Last Date: May 29, 2025
Actively Recruiting Companies at Bengaluru, Karnataka