Description

You will own penetration testing and application security assessments for web, mobile, and API platforms.

This role is on-site.

Responsibilities

• Perform penetration testing on thin and thick client applications, simulating real-world attacks to identify and validate vulnerabilities.
• Conduct comprehensive security assessments using Burp Suite, Metasploit, OWASP ZAP, and MobSF.
• Develop Proof of Concepts (PoCs) and custom exploits for identified security flaws in applications and infrastructure.
• Conduct secure code reviews and provide detailed remediation guidance, validating fixes for logic and implementation flaws.
• Prepare detailed security assessment reports with risk ratings and collaborate with development teams on secure design practices.

Required Skills

• 5+ years of experience in application security and penetration testing.
• Strong expertise in web application security and OWASP Top 10 methodologies.
• Practical experience using Burp Suite, Metasploit, and OWASP ZAP.
• Hands-on experience with API security testing and business logic vulnerability assessment.
• Proficiency in Android and iOS application security testing.
• Working knowledge of Python and JavaScript for scripting and tooling.

Key Skills

Education

Any Graduate