Description

You will lead penetration testing and vulnerability assessments for web and microservices applications within Azure environments.

Responsibilities

• Perform security penetration testing and vulnerability assessments for web and microservices applications.
• Plan and prioritize vulnerabilities based on application architecture, functionality, and test environment prerequisites.
• Identify combinations of vulnerabilities during the execution of complex test scenarios and cases.
• Analyze dynamic scan reports from tools like ZAP and Web Inspect to remove false positives.
• Provide expert security advice and remediation recommendations to application development teams.

Required Skills

• 5+ years of experience in application security and penetration testing.
• Deep expertise in OWASP Top 10, CWE, and Secure SDLC principles.
• Proven ability to exploit business logic and framework-related vulnerabilities.
• Hands-on experience with security tools including ZAP, ZAP Docker, Qualys, sslslabs, SSLYZE, and Metasploit.
• Strong understanding of cloud security practices across Azure, AWS, and GCP.
• Extensive experience addressing WEB and API application security issues.
• Knowledge of automation techniques for security testing.
• Familiarity with DevSecOps, including CI/CD pipeline integration and container security.
• Any Graduate degree.

Key Skills

Education

Any Graduate