Description

You will perform penetration and vulnerability testing for web and thick-client applications within an enterprise environment.

Responsibilities

• Execute manual web application vulnerability assessments without relying on automated scanners.
• Capture and analyze network traffic to identify vulnerabilities and sensitive data exposure.
• Write high-quality technical reports detailing findings from web and thick-client assessments.
• Articulate security risks and remediation steps to both technical peers and management.
• Train others on OWASP Top 10 concepts and related security principles.

Required Skills

• Minimum 2 years of experience in penetration/vulnerability testing for web and thick-client applications.
• Minimum 3 years of experience implementing enterprise security controls including NIDS/NIPS, antivirus, web filtering, DLP, and botnet detection.
• Minimum 1 year of experience with programming or scripting in Java, .NET, PHP, Ruby, Perl, or Bash.
• Minimum 1 year of experience with SQL and MS SQL database management.
• Strong understanding of web technologies including HTTP, HTML, CSS, and Forms.
• Deep knowledge of core security fundamentals: defense in depth, least privilege, access control, encryption, and security architecture.
• Familiarity with compliance and regulatory requirements such as PCI DSS, SOX, and HIPAA.
• Demonstrable knowledge of techniques used to bypass enterprise security controls.

Preferred Skills

• Experience with SAP application security testing.
• Background in training and mentoring junior security staff.

Key Skills

Education

Any Gradute