Description

You will conduct penetration and vulnerability testing for web and thick-client applications within an enterprise environment.

Responsibilities

• Perform manual web application vulnerability assessments without relying on automated scanners.
• Capture and analyze network traffic to identify vulnerabilities and sensitive data exposure.
• Create high-quality written reports detailing findings from web and thick-client assessments.
• Articulate technical security findings to both peer engineers and management levels.
• Train others on OWASP Top 10 concepts and related security principles.

Required Skills

• At least 2 years of experience in penetration and vulnerability testing for web and thick-client applications.
• 3 years of experience implementing enterprise security controls, including NIDS/NIPS, antivirus, web filtering, and DLP.
• Demonstrable knowledge of techniques used to bypass security controls.
• Proficiency in web technologies including HTTP, HTML, CSS, Forms, and Database Connectivity.
• 1 year of experience with programming or scripting in .NET, Java, PHP, Ruby, Perl, Bash, or similar.
• 1 year of experience with SQL syntax and MS SQL database management.
• Strong understanding of compliance frameworks such as PCI DSS, SOX, and HIPAA.
• Solid grasp of security fundamentals: defense in depth, least privilege, access control, encryption, and security architecture.
• Any Graduate degree.

Key Skills

Education

Any Gradute