Job Description

Company Overview
--------------------


At Motorola Solutions, we're guided by a shared purpose - helping people be their best in the moments that matter - and we live up to our purpose every day by solving for safer. Because people can only be their best when they not only feel safe, but are safe. We're solving for safer by building the best possible technologies across every part of our safety and security ecosystem. That's mission -critical communications devices and networks, AI-powered video security & access control and the ability to unite voice, video and data in a single command center view. We're solving for safer by connecting public safety agencies and enterprises, enabling the collaboration that's critical to connect those in need with those who can help. The work we do here matters.

Department Overview
-----------------------


UC Product Development Cyber security team works with all Dev. teams to ensure Secure SDLC is trained, understood and applied in daily design, development and leading product Security practices to ensure secure product is designed, developed, validated(Security Sign-off) and deployed to our customers as per Cyber security standards/compliances.

--------------------

Web Application Security(WebSecApp) Engineer ::

• Proven experience in PenetrationTesting on Web Applications, Mobile, Thick clients and Web Servers.
• Strong expertise and knowledge in OWASP Top 10 threats
• Threat Modelling/STRIDE
• Experience in SAST and DAST activities
• Experience in vulnerability management
• Experience in working with development teams in demonstrating and fixing security issues
• Knowledge on Secure SDLC life cycle activities
• Azure Cloud Security controls
• Experience or Knowledge in any 1 programming languages preferably Java, Python, C
• Good to have participation in bug bounty programs

Tools : Checkmarx, Burpsuite, Nmap, Sqlmap, Metasploit framework, Kali Linux, Microsoft STRIDE, Twistlock, Sophos AV, Mend, Nessus(Tenable.io) usage in CI/CD tool chain.

Certifications Preferred : OSCP, CEH

Basic Requirements
----------------------

• Good knowledge and Hands-on experience In -> Secure Development life cycle(Secure SDLC), Anti Virus Scans/Analysis, CIS2, STIG, FedRamp benchmarking, RHEL platform/Infrastructure security, DAST/PenTest, Threat Modelling/STRIDE, OWASP top10 security check, WebSecApps, SoC concepts & integration
• Proven experience in PenetrationTesting on Web Applications, Mobile, Thick clients and Web Servers.
• Strong expertise and knowledge in OWASP Top 10 threats
• Experience in working with development teams in demonstrating and fixing security issues
• Knowledge on Secure SDLC life cycle activities
• Azure Cloud Security controls
• Experience or Knowledge in any 1 programming languages preferably Java, Python, C

Travel Requirements
-----------------------


None
Relocation Provided
------------------------


None
Position Type
------------------


Experienced Referral Payment Plan
-------------------------


Yes •EEO Statement •


Motorola Solutions is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion or belief, sex, sexual orientation, gender identity, national origin, disability, veteran status or any other legally-protected characteristic.


We are proud of our people-first and community-focused culture, empowering every Motorolan to be their most authentic self and to do their best work to deliver on the promise of a safer world. If you'd like to join our team but feel that you don't quite meet all of the preferred skills, we'd still love to hear why you think you'd be a great addition to our team.


We're committed to providing an inclusive and accessible recruiting experience for candidates with disabilities, or other physical or mental health conditions. To request an accommodation, please email ohr@motorolasolutions.com.