Description

You will lead application security testing and vulnerability discovery across web, mobile, and network environments.

Responsibilities

• Perform manual security code reviews for Java and .NET applications.
• Execute automated security testing using SAST and DAST methodologies.
• Conduct manual penetration tests on web applications, APIs, mobile apps, and internal/external networks.
• Develop new testing methods to identify vulnerabilities and potential attack vectors.
• Provide technical leadership and mentorship to junior and offshore team members.
• Partner with Cyber teams to automate testing processes and develop new techniques.
• Communicate testing processes and technical results to both technical and non-technical audiences.

Required Skills

• 3+ years of experience using security testing tools such as AppScan, Netsparker, Acunetix, Checkmarx, Veracode, BurpSuite, OWASP ZAP, or Kali Linux.
• Formal programming experience in Java or C# (minimum 6 months).
• Experience performing manual application penetration testing and exploit discovery.
• Proficiency in both static (SAST) and dynamic (DAST) application security testing.
• Ability to conduct code reviews against common programming languages.
• Any Graduate degree.

Preferred Skills

• Ethical hacking certifications such as GWAPT, CREST, OSCP, OSWE, or OSWA.

Key Skills

Education

Any Graduate