Source Code Auditor Skills

Question

What are the skills required to become a Source Code Auditor? How important is knowledge about programming languages for this job? I ask this because I have an interview for this job but I am not very strong in programming

Answer 1

Programming is a very important aspect of this job role. All you do while working as a Source Code Auditor is look at the code and find a weakness in it. You must have in-depth knowledge of programming language. If you think you are weak in programming languages, I suggest you start working on it. The most important programming languages you need to know about are C/C++, C#, Java/JSP, .NET, Perl, PHP, Ruby, Python.

Other skills helpful would be:

• CERT/CC, MITRE, Sun and NIST secure coding guidelines and standards
• Software and web application development practices
• Penetration testing and vulnerability assessments

Answer 2

Hi Vidhyut, following skills are required to become a Source Code Auditor:

• Up to date knowledge of IT Security hardware, software and solutions

• Great understanding of the source code programming languages like Java, PHP, Python, C#, C++, .NET or Ruby On Rails etc. that you will be assessing

• Practical experience using computer operating systems such as MS Windows, UNIX/Linux

• An analytical mind with the ability to make sense of source code.

• Good written and verbal communication skills as you will be reporting on your audits findings