Description

You will conduct technical security assessments across web and mobile platforms.

Responsibilities

• Perform web and mobile application penetration testing using commercial tools like BurpSuite.
• Conduct security reviews, threat modeling, and track findings through to remediation.
• Execute DAST, SAST, and code reviews within DevSecOps workflows.
• Identify and exploit vulnerabilities such as XSS, CSRF, SQLi, SSRF, and arbitrary file uploads.
• Document execution reports and communicate findings to cross-functional teams.

Required Skills

• 6+ years of experience in penetration testing.
• OSCP certification.
• Hands-on experience testing real-world applications rather than just lab environments.
• Deep understanding of OWASP Top 10 vulnerabilities and HTTP protocols.
• Proficiency in Python or Java for simulating infiltration and testing.
• Experience identifying mobile vulnerabilities including API issues, insecure storage, memory corruption, and deep links.
• Strong troubleshooting and technical problem-solving skills.
• Bachelor's degree.

Preferred Skills

• Ability to create new testing methods to identify anomalies and vulnerabilities.

Key Skills

Education

Bachelors