Description

You will secure mobile and web applications through rigorous testing, architecture analysis, and continuous security integration.

Responsibilities

• Perform manual and automated penetration tests on web applications, mobile apps, and networks to simulate cyber-attacks.
• Conduct security assessments to identify OWASP Top 10 vulnerabilities and provide actionable remediation steps.
• Review and audit source code using SAST and DAST tools to detect flaws and ensure secure coding practices.
• Analyze application architecture to identify threats and validate the implementation of security controls.
• Ensure compliance with regulatory standards including GDPR, PCI-DSS, and HIPAA.

Required Skills

• 5+ years of experience in application security and penetration testing.
• Proficiency with penetration testing tools including Burp Suite, Nessus, and OWASP ZAP.
• Deep understanding of OWASP Top 10 and mobile-specific security issues.
• Experience with reverse-engineering mobile apps such as Android APKs and iOS IPAs.
• Hands-on knowledge of security protocols: OAuth, OpenID, SAML, HTTPS, and SSL/TLS.
• Experience with SAST/DAST tools and source code analysis tools like SonarQube.
• Knowledge of network security, including firewalls, VPNs, IDS/IPS, and WAF.
• Familiarity with OWASP MSTG and WSTG frameworks.
• Ability to design and implement cloud infrastructure following CIS Benchmarks.
• Competency in Linux administration and patch management.

Preferred Skills

• Experience providing secure development training to engineering teams.

Key Skills

Education

Any Graduate