Description

You will conduct deep-dive security assessments across web, mobile, and API environments, identifying vulnerabilities and validating fixes.

This role is on-site.

Responsibilities

• Conduct security assessments of web applications, mobile apps, databases, client-side tools, and APIs.
• Execute manual and automated code analysis to evaluate source code security and quality.
• Develop custom tools and exploits to validate vulnerabilities and execute verification testing for customer fixes.
• Generate detailed reports with exploitation procedures, risk analysis, and mitigations.

Required Skills

• 5+ years of experience in application penetration testing.
• Hands-on expertise in manual web, application, and API penetration testing.
• In-depth understanding of OWASP Top 10 and the OWASP Web Security Testing Guide.
• Proficiency in threat modeling concepts and associated tooling.
• Firm understanding of DevSecOps and pipeline scanning technologies.
• Ability to communicate vulnerabilities in the context of business risk and mitigation.
• Experience developing proofs of concept (PoCs) and formal technical presentations.

Preferred Skills

• Any graduate degree.

Key Skills

Education

ANY GRADUATE