Description

You will perform application penetration testing across web, mobile, and API environments to identify security defects.

Responsibilities

• Conduct manual and automated penetration testing to identify security weaknesses in web applications, mobile apps, and APIs.
• Configure automated scanning tools and perform defect analysis, including validating results and triaging false positives.
• Generate detailed technical reports documenting identified defects and remediation paths.
• Collaborate with development and security teams to ensure clear understanding of vulnerabilities.
• Support the improvement of testing methodologies and participate in peer reviews of technical reports.

Required Skills

• 5+ years of Cyber Security Research experience or equivalent training/education.
• 2+ years of web application penetration testing experience.
• 2+ years of Dynamic Application Security Testing (DAST) experience.
• Proficiency with DAST tools including Invicti, AppScan, WebInspect, Fiddler, or Burp Suite.
• Advanced knowledge of application security and OWASP Top 10 vulnerabilities.
• Experience with scripting and automation using Python or Shell.
• Knowledge of security best practices and compliance standards such as PCI DSS and GDPR.

Preferred Skills

• Security certifications such as OSCP, BSCP, GWAPT, GPEN, or GXPN.

Key Skills

Education

Any Graduate