Description

Test and assess application security across the full stack, ensuring vulnerability identification and remediation.

This role is on-site.

Responsibilities

• Conduct static (SAST), dynamic (DAST), interactive (IAST), and API security testing.
• Perform manual penetration testing to uncover business logic flaws and privilege escalation paths.
• Identify, exploit, and validate vulnerabilities against OWASP Top 10, SANS CWE Top 25, and NIST standards.
• Review scanner results and follow up with developers for remediation.
• Prepare actionable vulnerability reports with risk ratings and track remediation progress.

Required Skills

• 5+ years of professional experience in security testing.
• Strong knowledge of web application architecture, authentication, authorization, and data flows.
• Expertise with Burp Suite, OWASP ZAP, Postman, Nessus, Checkmarx, Veracode, Fortify, and SonarQube.
• Hands-on experience with scripting using Python, Bash, PowerShell, or JavaScript.
• Familiarity with cloud-native security in Azure and API security testing.
• Understanding of secure coding standards and common vulnerability patterns.

Preferred Skills

• Industry certifications such as OSCP, OSWE, GPen, GWAPT, CEH, or CSSLP.
• Knowledge of container security (Docker, Kubernetes) and microservices architecture.

Key Skills

Education

Any Gradute