Description

You will secure applications through manual penetration testing, security assessments, and automated analysis within the development lifecycle.

This role is hybrid.

Responsibilities

• Perform manual penetration testing and security assessments using Burp Suite and proxy tools.
• Triage SAST, DAST, and IAST results to prioritize and remediate vulnerabilities.
• Integrate security practices into CI/CD pipelines to support DevSecOps initiatives.
• Leverage GenAI technologies to scale application security reviews and automate code analysis.
• Conduct AWS configuration reviews and maintain documentation for findings and compliance.

Required Skills

• 5+ years of experience in cybersecurity and application security.
• Deep understanding of OWASP Top 10 issues and remediation guidelines.
• Proficiency in Java, Python, or JavaScript.
• Hands-on experience with SAST, DAST, and IAST tools.
• Working knowledge of AWS environments.
• Experience with CI/CD tools including Jenkins and GitLab.
• Technical knowledge in security engineering, authentication, protocols, and cryptography.
• Experience in infrastructure or application-level vulnerability testing and auditing.
• Bachelor's degree in a technical field such as Computer Science or Computer Engineering.

Preferred Skills

• Software development background.
• Familiarity with GenAI tools.
• Certifications such as GWAPT, OSWE, or Burp Suite Certified Practitioner.

Key Skills

Education

Any Graduate