Description

Key Skills: Penetration Testing, Web Application Security, Burp Suite, Metasploit, OWASP ZAP, MobSF, API Security, Android & iOS Security, OWASP Top 10, Python, JavaScript

Roles & Responsibilities:

• Perform penetration testing on thin and thick client applications across Web, Mobile (Android and iOS), and API platforms.
• Simulate real-world attacks to identify, exploit, and validate security vulnerabilities in applications and infrastructure.
• Develop Proof of Concepts (PoCs) and custom exploits for identified security flaws.
• Conduct comprehensive application security assessments using tools such as Burp Suite, Metasploit, OWASP ZAP, and MobSF.
• Prepare detailed security assessment reports, including risk ratings, impact analysis, and remediation recommendations.
• Collaborate closely with development teams to support vulnerability remediation and secure design practices.
• Perform secure code reviews for in-house applications to identify logic and implementation flaws.
• Provide clear remediation guidance and validate fixes for identified vulnerabilities.
• Identify and address complex vulnerabilities, including business logic issues, and effectively communicate findings to both technical and non-technical stakeholders.
• Participate in red team exercises, threat hunting activities, and OSINT-based research.
• Contribute to threat modeling exercises and development of internal security tools.
• Maintain strong knowledge of OWASP Top 10 and emerging application security threats.
• Work independently in complex environments with minimal supervision while demonstrating strong communication and presentation skills.

Experience Required:

• 2 - 6 years of experience in application security and penetration testing.
• Strong expertise in web application security and vulnerability assessment methodologies.
• Practical experience using Burp Suite, Metasploit, OWASP ZAP, and MobSF.
• Hands-on exposure to Android and iOS application security testing.
• Experience with API security testing and business logic vulnerability assessment.
• Working knowledge of scripting or programming languages such as Python and JavaScript is an advantage.

Education: B.E., B.Tech

Key Skills

Education

Any Graduate