Application Penetration Testing Focused on web and API security.

Network Penetration Testing Assessing and exploiting network vulnerabilities.

API Penetration Testing Testing REST/SOAP APIs for security flaws and abuse.

Vulnerability Assessment & Management Including defect tracking and developer support.

Source Code Review Especially in Java and using secure coding principles.

Security Tools Proficiency Burp Suite, Fortify, CheckMarx, Nessus, Metasploit, etc.

OWASP & WASC Knowledge Strong grasp of OWASP Top 10 and WASC classifications.

Automated & Manual Testing Including test case creation and business logic testing.

Exploit Development & Impact Analysis Demonstrating real-world attack impact.

Report Writing & Stakeholder Communication Clear documentation and presentations.

Understanding of the nature and sources of security vulnerabilities, how to identify and exploit them.

Strong expertise in security technologies and significant experiences in information technology focusing on security related vulnerabilities.

Good to have programming experience in Java, shell scripting, Perl, or Python.

Sound Knowledge of TCP/IP protocol Stack, HTTP protocol, encoding standards, encryption technologies and development frameworks.

Application Security Testing/Penetration Testing (Web based, Thick client, web services, Mobile).

Network Security Testing/Penetration Testing (Network, OS, Databases etc.).

Static Code Analysis/ Secure Code Review.

Security defect Tracking and working closely with Developers to fix the issue.

Bachelor s or higher degree in Computer Science or equivalent experience.

Penetration tester

Job Description