Description

Key Skills: Penetration Testing, Manual Testing, Burpsuite, SoapUI

Roles and Responsibilities:

• Conduct comprehensive manual penetration tests and source code reviews for web, web API, and mobile applications to identify security vulnerabilities.
• Use security testing tools to validate findings, reproduce issues, and support vulnerability reporting and remediation guidance.
• Assess business risk associated with common security vulnerabilities and translate technical impact for developers and leadership.
• Perform testing using techniques such as web application proxies and packet capture analysis, including browser extensions and advanced testing workflows.
• Support penetration testing activities across mobile platforms (iOS, Android) and mobile device simulators, including authentication and session-related attack scenarios.

Skills Required:

• 5+ years of hands-on application security penetration testing and code review experience (10+ years preferred per role requirements)
• Manual penetration testing and source code review experience for web, API, and mobile applications.
• Penetration testing tooling experience including Burp Suite Pro, SoapUI, Invicti, Checkmarx, Kali Linux, and Metasploit.
• Strong understanding of authentication and security protocols, application session management, and applied cryptography.
• Programming/debugging proficiency (e.g., Java, JavaScript, Python, PHP, ASP.NET, JSON, XML, Shell script, Objective-C) and working knowledge of SOAP/REST web APIs and SQL.

Good to Have:

• Experience with exploit automation platforms and advanced penetration testing workflows.
• Exposure to development frameworks such as Angular and React.
• Security certifications such as GWAPT, CEH, OSCP, or SANS.

Education: B.E. / B. Tech / M.E. / M. Tech

Key Skills

Education

Any Graduate