Description

You will lead manual penetration testing and source code reviews for web, API, and mobile applications to identify and remediate security vulnerabilities.

This role is on-site.

Responsibilities

• Conduct comprehensive manual penetration tests and code reviews for web, API, and mobile applications.
• Use security testing tools to validate findings, reproduce issues, and provide remediation guidance.
• Assess business risk of common vulnerabilities and translate technical impact for developers and leadership.
• Perform testing using web proxies, packet capture analysis, and advanced testing workflows.
• Support penetration testing on iOS and Android platforms, including authentication and session attack scenarios.

Required Skills

• 10+ years of hands-on application security penetration testing and code review experience.
• Manual penetration testing and source code review for web, API, and mobile applications.
• Experience with Burp Suite Pro, SoapUI, Invicti, Checkmarx, Kali Linux, and Metasploit.
• Strong understanding of authentication, security protocols, session management, and applied cryptography.
• Proficiency in Java, JavaScript, Python, PHP, ASP.NET, JSON, XML, Shell script, or Objective-C.
• Working knowledge of SOAP/REST web APIs and SQL.

Preferred Skills

• Experience with exploit automation platforms and advanced penetration testing workflows.
• Exposure to Angular and React development frameworks.
• Security certifications such as GWAPT, CEH, OSCP, or SANS.

Key Skills

Education

Any Graduate