Description

You will own the end-to-end security testing lifecycle for web, mobile, and API-driven applications.

This role is remote.

Responsibilities

• Perform manual security code reviews and manual ethical hacking across Java and .NET environments.
• Execute automated testing using SAST and DAST methodologies to identify vulnerabilities in source code and running applications.
• Conduct manual penetration tests on web applications, APIs, mobile apps, and internal/external networks.
• Develop new testing methods to identify novel entry points and exploitation vectors.
• Provide technical leadership during penetration test engagements and mentor junior or offshore team members.

Required Skills

• 10+ years of professional experience in security testing and application security.
• Proven experience with SCA (Source Code Analysis) and manual ethical hacking.
• Formal programming experience in Java or C#/.NET.
• Proficiency with AppScan, Netsparker, Acunetix, Checkmarx, or Veracode.
• Hands-on expertise with BurpSuite, OWASP ZAP, and Kali Linux.
• Ability to articulate technical testing processes and results to both technical and non-technical audiences.
• Any Graduate degree.

Preferred Skills

• Professional certifications such as OSCP, OSWE, OSWA, GWAPT, or CREST.

Key Skills

Education

Any Graduate