Description

Key Skills: Penetration Testing, Application Security, DevSecOps

Roles and Responsibilities:

• Conduct white-box, grey-box and black-box penetration tests across web applications, APIs, services and cloud-native environments.
• Perform application security assessments, architectural reviews and threat modeling exercises to identify attack paths and mitigation strategies.
• Research emerging vulnerabilities, validate exploitability and communicate technical risk and remediation priorities to engineering and management teams.
• Partner with developers to resolve security defects, improve secure coding practices and integrate security assessments into the software development lifecycle.
• Develop security training, workshops and technical guidance for engineering and QA teams, while improving assessment automation and productivity.

Skills Required:

• 3 - 5 years of relevant experience in penetration testing, application security engineering or security assessments.
• Hands-on experience with penetration testing methodologies, attack vectors, exploit development and vulnerability validation.
• Strong application security knowledge covering web applications, APIs, secure design reviews, threat modeling and common vulnerability classes.
• Ability to assess security risks in cloud-native services, microservices and distributed application architectures.
• Experience with security testing automation, CI/CD or secure software development lifecycle processes and practical remediation support.

Good to Have:

• Experience implementing DevSecOps practices and integrating security controls into development and delivery pipelines.

Education : B.Tech or B.Tech-M.Tech dual degree in any branch, or equivalent practical experience in software engineering or cybersecurity

Key Skills

Education

Any Graduate