Description

Perform manual security assessments to identify and exploit vulnerabilities across web, API, mobile, and network environments.

Responsibilities

• Conduct manual penetration tests on web applications, internal systems, APIs, and mobile apps.
• Identify and exploit vulnerabilities to assess the security posture of target systems.
• Analyze vulnerabilities to determine potential impact and provide specific remediation recommendations.
• Document findings with detailed exploit chains and proof-of-concept demonstrations.
• Collaborate with cross-functional teams to ensure comprehensive security testing coverage.

Required Skills

• 5+ years of experience in manual application penetration testing.
• Strong understanding of web application architecture and protocols including HTTP, HTML, JavaScript, and AJAX.
• Deep knowledge of OWASP Top 10 vulnerabilities and exploitation techniques.
• Proficiency with security testing tools such as Burp Suite, Metasploit, and Nmap.
• Experience with scripting languages including Python, Perl, or Bash.
• Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent experience.

Preferred Skills

• Experience with mobile application security testing.
• Certifications such as OSCP, CEH, or similar.

Key Skills

Education

Any Graduate