Cyber Security Engineer

Cyber Securit Experience:- ~3-4 yrs

Skilled and detail-oriented Penetration Tester to assess and strengthen the security posture of web applications, mobile applications, and APIs. The ideal candidate will identify vulnerabilities, exploit potential weaknesses ethically, and provide actionable remediation steps to improve overall system security.

Key Responsibilities: Conduct end-to-end penetration testing on web, mobile, and API-based applications to identify security flaws and vulnerabilities.

Perform vulnerability assessments, exploit validation, and manual testing using industry-standard tools and custom scripts.

Evaluate application logic flaws, authentication mechanisms, and authorization controls.

Execute OWASP Top 10 and API Security Top 10 assessments.

Perform static and dynamic analysis of applications to uncover security weaknesses.

Conduct mobile app security assessments for Android and iOS platforms, including reverse engineering and network traffic analysis. Test RESTful and GraphQL APIs for injection flaws, authentication, and session management vulnerabilities.

Collaborate with development, DevSecOps, and infrastructure teams to discuss remediation strategies and secure coding practices. Prepare detailed penetration testing reports, including risk ratings, exploitation steps, and mitigation recommendations.

Stay up to date with emerging threats, vulnerabilities, and new attack vectors.

Expertise in mobile application testing (Android/iOS) using tools like MobSF, Frida, Burp Suite Mobile Assistant, or Objection.

Hands-on experience with API testing tools such as Postman, Burp Suite, and OWASP ZAP.

Familiarity with OWASP methodologies, MITRE ATT&CK, and NIST frameworks.

Experience with Burp Suite, OWASP ZAP, Nmap, Sqlmap, Metasploit, Wireshark, and Kali Linux. Knowledge of cloud-based security (AWS, Azure) is an advantage.