Description

Conduct deep-dive security assessments across web and mobile platforms to identify real-world vulnerabilities.

Responsibilities

• Perform web and mobile application penetration testing, including DAST, SAST, and code reviews.
• Execute security reviews, threat modeling, and tracking of findings within DevSecOps workflows.
• Develop new testing methods to identify anomalies and security gaps in production-level applications.
• Document execution reports and collaborate with teams to communicate technical findings.

Required Skills

• OSCP certification is mandatory.
• 5+ years of experience conducting penetration testing using commercial tools like BurpSuite.
• Proven ability to identify and exploit web vulnerabilities including XSS, CSRF, SQLi, SSRF, and arbitrary file upload.
• Hands-on experience testing mobile applications for API issues, insecure storage, memory corruption, and deep links.
• Strong understanding of HTTP, computer security, and the OWASP Top 10.
• Coding skills in Python or Java to simulate infiltration and automate testing.
• Practical experience identifying vulnerabilities in production environments rather than lab settings.

Preferred Skills

• Experience implementing DevSecOps practices.

Key Skills

Education

Any Graduated