Description

You will own security assessments for web and mobile platforms, identifying and exploiting real-world vulnerabilities. You will drive findings through to remediation while developing new testing methods for system anomalies.

Responsibilities

• Perform deep-dive penetration testing on web and mobile applications to uncover security gaps.
• Execute security reviews, threat modeling, and track vulnerabilities to remediation.
• Develop new testing methods to identify system anomalies and security gaps.
• Collaborate with cross-functional teams to document execution reports and communicate technical findings.
• Apply DAST, SAST, and code review techniques within DevSecOps workflows.

Required Skills

• 10+ years of experience conducting penetration testing.
• Proficiency with BurpSuite and other commercial or freeware security tools.
• Deep understanding of HTTP protocols and the OWASP Top 10 vulnerabilities.
• Hands-on experience identifying and exploiting XSS, CSRF, SQLi, SSRF, and arbitrary file uploads.
• Experience testing mobile applications for API issues, insecure storage, memory corruption, and deep link vulnerabilities.
• Coding proficiency in Python or Java to simulate infiltration and automate testing.
• OSCP certification or equivalent technical expertise.
• Strong troubleshooting skills and the ability to research technical solutions independently.

Preferred Skills

• Knowledge of how security breaches impact business operations.

Key Skills

Education

ANY GRADUATE