Description

Lead security assessments and technical teams to identify and mitigate vulnerabilities across infrastructure, web applications, and APIs.

Responsibilities

• Own the end-to-end closure of Vulnerability Assessment and Penetration Testing (VAPT) for infrastructure, web applications, and web services.
• Perform manual and automated security testing, including threat modelling and the development of testing scripts and procedures.
• Conduct code reviews across multiple programming languages and provide corrective action recommendations.
• Execute periodic configuration audits on network devices, servers, and critical functions.
• Provide technical oversight, mentoring, and coaching to team members to ensure project objectives are met.

Required Skills

• 7+ years of experience in application and network security.
• Hands-on experience with network, web-based, and cloud application security assessments.
• Proficiency in at least two scripting languages such as Python, Perl, PHP, or Ruby.
• Experience using web application scanning tools like Burp Suite Pro, Acunetix, or Web Inspect.
• Experience with network assessment and exploitation tools including Kali, Nessus, Nexpose, or Metasploit.
• Expertise in static code review tools such as Checkmarx, HP Fortify, or IBM AppScan.
• Deep understanding of OWASP, OSSTMM, NIST, and other security methodologies.
• Knowledge of security bug classification frameworks including CVSS and DREAD.
• Familiarity with PCI, SOC, and GDPR security guidelines.

Preferred Skills

• Experience with high-level languages including Java, C, C++, or .NET.
• Knowledge of mobile application security for iOS and Android.

Key Skills

Education

Bachelor/Master Degree