Description

You will conduct penetration and vulnerability testing for web and thick-client applications within an enterprise environment.

This role is on-site.

Responsibilities

• Perform manual web application vulnerability assessments without relying on automated scanners.
• Capture and analyze network traffic to identify vulnerabilities and sensitive data exposure.
• Create high-quality written reports detailing findings from web and thick-client assessments.
• Articulate technical security findings to both peer engineers and management levels.
• Train others on OWASP Top 10 concepts and related security principles.

Required Skills

• 2+ years of experience in penetration and vulnerability testing for web and thick-client applications.
• 3+ years of experience implementing enterprise security controls, including NIDS/NIPS, antivirus, web filtering, and DLP.
• Knowledge of techniques used to bypass security controls.
• Proficiency in web technologies including HTTP, HTML, CSS, Forms, and Database Connectivity.
• 1+ year of experience with programming or scripting in .NET, Java, PHP, Ruby, Perl, Bash, or similar.
• 1+ year of experience with SQL syntax and MS SQL database management.
• Strong understanding of compliance frameworks such as PCI DSS, SOX, and HIPAA.

Preferred Skills

• Solid grasp of security fundamentals: defense in depth, least privilege, access control, encryption, and security architecture.

Key Skills

Education

Any Gradute