Manager Application Security

You have a minimum of 7 years of experience as a penetration tester with proven abilities in approaching black box and white box testing. Your work profile includes hands-on experience in manual penetration testing. You are familiar with using vulnerability scanners such as Burp Suite, Checkmark, OWASP ZAP, Nmap, Nessus, and Metasploit Framework. Additionally, you have practical experience in API penetration testing of Rest/SOAP based interfaces. Your knowledge of OWASP methodology and web vulnerabilities is extensive, allowing you to easily explain and demonstrate how they work. You are proficient in Python or any other scripting language and are comfortable working in Linux/Unix environments. Desirable skills for you to possess include familiarity with PCI, NIST guidelines (including PII), ISO2700x, cloud security, virtualization, SecDevOps, and containerized deployment. As an extremely committed and self-motivated individual, you excel in delivering results even in challenging situations. Your excellent written and oral communication skills enable effective collaboration with various teams. Key Responsibilities: - Assess application and solution security controls against black box, grey box, and white box attacks using manual and automated (DAST) penetration techniques - Collaborate with development teams to assess penetration test results and contribute to risk mitigation actions - Perform source code analysis (client/server/database) for vulnerabilities using scanning tools like SAST Qualifications Required: - Minimum 7 years of experience as a penetration tester - Proficiency in using vulnerability scanners and frameworks like Burp Suite, Checkmark, OWASP ZAP, Nmap, Nessus, Metasploit Framework - Hands-on experience in manual penetration testing - Knowledge of OWASP methodology and web vulnerabilities - Experience in API penetration testing of Rest/SOAP based interfaces - Proficiency in Python or any other scripting language - Familiarity with PCI, NIST guidelines, ISO2700x, cloud security, virtualization, SecDevOps, and containerized deployment - Excellent written and oral communication skills,