Description

You will conduct security assessments on the Netcracker product suite and customer solutions, including self-service portals, CRM, rating and billing systems, and cloud deployments.

Responsibilities

• Assess application and solution security controls using manual and automated (DAST) penetration testing against black box, grey box, and white box attack models.
• Discover exploitability and security weaknesses across various systems by analyzing technical documentation, source code, and engaging with development teams.
• Perform static code analysis (client/server/database) using scanning tools to identify vulnerabilities.
• Prioritize identified vulnerabilities based on CVSS v.3.1 / v.4.0 and work with development teams to analyze and propose mitigation options.
• Track progress on assigned security testing tasks within an international team environment.

Required Skills

• 5+ years of experience in penetration testing.
• Proven ability to perform black box and white box testing methodologies.
• Deep knowledge of OWASP Top 10 vulnerabilities and attacks, including XSs, CSRF, SSRF, SQLi, RCE, and XXE.
• Hands-on experience with vulnerability scanners (static and dynamic) such as OWASP ZAP and Burp.
• Experience with API penetration testing for Rest/SOAP based interfaces.
• Familiarity with scanning frameworks including Nmap and Metasploit Framework.
• Proficiency in working with Linux, WSL, and CLI tools.
• Strong analytical skills to evaluate third-party vulnerabilities and customer reports.

Key Skills

Education

Any Graduate