Description

You perform manual and automated penetration testing across web, mobile, and cloud environments.

This role is hybrid.

Responsibilities

• Lead security assessments using DAST and SAST tools to identify vulnerabilities in applications.
• Evaluate and secure cloud environments on AWS and Azure, including EC2, S3, RDS, VNets, and DevOps pipelines.
• Conduct API security reviews and enforce secure coding practices against industry standards.
• Perform code reviews in Python, Java, PHP, Perl, and Objective-C to detect security flaws.
• Develop and maintain Application Security Programs with a focus on CI/CD integration and secure SDLC.

Required Skills

• 8+ years of experience performing penetration testing.
• Proficiency in Burp Suite, Metasploit, ZAP, Checkmarx, AppScan, WebInspect, and Acunetix.
• Hands-on cloud security expertise in AWS (EC2, S3, RDS, KMS) and Azure security architecture.
• Strong programming background in Python, Java, PHP, Perl, and Objective-C.
• In-depth knowledge of OWASP Top 10, NIST, and secure SDLC.
• Understanding of network security concepts: SSL/TLS, TCP/IP, ACLs, routing, and load balancing.
• Familiarity with LAMP, LEMP, and MEAN stacks from a security perspective.
• OSCP, OSWA, CEH, or SANS (GWAPT, GPEN, GWEB) certifications.

Key Skills

Education

Bachelor's degree