Description

You will conduct security assessments across enterprise web applications, microservices, and mobile platforms.

Responsibilities

• Perform penetration testing on web applications, microservices, and mobile apps.
• Identify vulnerabilities including XSS, XXE, SQL Injection, deserialization, and file inclusion attacks.
• Test web-based APIs using REST, SOAP, XML, and JSON protocols.
• Develop actionable intelligence through open source intelligence (OSINT) gathering.
• Design and document pragmatic remediation guidance for all discovered vulnerabilities.

Required Skills

• 3+ years of experience using Burp Suite Pro or equivalent tools like ZAP.
• Deep understanding of OWASP testing methodology.
• Experience testing REST, SOAP, XML, and JSON APIs.
• Proficiency in at least one scripting language such as Python, Bash, Perl, or PowerShell.
• Knowledge of common vulnerabilities like SSRF, remote execution flaws, and authentication flaws.
• Familiarity with front-end frameworks including AngularJS and Bootstrap.
• Experience with server configuration and path traversal attacks.

Preferred Skills

• Any graduate degree.

Key Skills

Education

ANY GRADUATE