Description

Lead technical security assessments for web and mobile platforms, driving vulnerability remediation through direct engagement with development teams.

Responsibilities

• Execute penetration tests on web and mobile applications using BurpSuite and other commercial tools.
• Conduct security reviews, threat modeling, and code analysis to identify risks early in the DevSecOps workflow.
• Exploit and validate vulnerabilities including XSS, CSRF, SQLi, SSRF, and insecure file uploads.
• Document findings in detailed reports and communicate technical risks to cross-functional stakeholders.
• Track identified vulnerabilities through to final remediation and verification.

Required Skills

• 6+ years of hands-on penetration testing experience in real-world production environments.
• Active OSCP certification.
• Deep understanding of OWASP Top 10 vulnerabilities and HTTP protocol mechanics.
• Proficiency in Python or Java to write custom scripts for infiltration simulation.
• Experience testing mobile applications, specifically API security, insecure storage, memory corruption, and deep links.
• Bachelor's degree in Computer Science or related field.

Preferred Skills

• Ability to develop new testing methodologies to detect novel anomalies and vulnerabilities.

Key Skills

Education

Bachelors