Application Penetration Tester

Application Penetration Tester

• Application Penetration Tester (2 to 3 Years)
• Application Penetration Tester (5 to 6 Years)
• Application Penetration Tester (7 to 9 Years)
• Source Code Review (2 to 3 Years)
• Source Code Review (5 to 6 Years)
• Source Code Review (7 to 9 Years)

Responsibilities:

• Perform hands-on Web, Mobile, API, and Thick Client application penetration testing
• Conduct Source Code Reviews to identify security flaws, coding errors, and compliance issues
• Perform static analysis and provide remediation recommendations based on best practices
• Validate fixes and ensure vulnerabilities are resolved without introducing new risks
• Analyze third-party libraries and dependencies for known vulnerabilities and licensing risks, and recommend secure upgrades
• Support integration of security tools into CI/CD pipelines
• Assist in risk assessment, threat modeling, and audit compliance
• Collaborate with development and security teams to enhance code quality and safety
• Document findings and communicating technical issues clearly to stakeholders
• Stay updated on emerging threats, tools, and industry standards

What we're Looking For:

• Certifications Required industry-leading certification like CEH, OSCP/SANS 25, LPT, CEPT, or equivalent.
• Hands-on experience with tools like Burp Suite, MobSF, Fortify, SonarQube (or similar)
• Good problem-solving mindset, clear communication skills, and the ability to prepare MIS reports.