Description

You will own the end-to-end security testing lifecycle for web, mobile, and API-driven applications.

Responsibilities

• Perform manual security code reviews and manual ethical hacking (MEH) across Java and .NET environments.
• Execute automated testing using SAST and DAST methodologies to identify vulnerabilities in running applications and source code.
• Conduct manual penetration tests on web applications, APIs, mobile applications, and internal/external networks.
• Develop new testing methods to identify novel entry points and exploitation vectors.
• Provide technical leadership and advice during penetration test engagements while mentoring junior and offshore team members.
• Partner with Cyber teams to automate testing processes and develop new security techniques.

Required Skills

• 10+ years of professional experience in security testing and application security.
• Proven experience with SCA (Source Code Analysis) and manual ethical hacking.
• Formal programming experience in Java or C#/.NET.
• Proficiency with AppScan, Netsparker, Acunetix, Checkmarx, or Veracode.
• Hands-on expertise with BurpSuite, OWASP ZAP, and Kali Linux.
• Ability to articulate technical testing processes and results to both technical and non-technical audiences.
• Any Graduate degree.

Preferred Skills

• Professional certifications such as OSCP, OSWE, OSWA, GWAPT, or CREST.

Key Skills

Education

Any Graduate