Senior Security Researcher

Job Description

Job Description Security Brigade is looking for a Senior Security Researcher who will be working with ShadowMap tool which is an internal security tool & manage on-site clients for long-term. Objective of this Role Analyze attack surface management tool which contains web & mobile application alerts, data leaks, dark web & exposed code repositories. Assist clients by creating a presentation which summarizes vulnerability findings & perform penetration testing on the same. Demonstrate POC to the clients & collaborate with their developers to mitigate those findings. Required Skills Excellent knowledge of Web Application Penetration Testing . Hands-on practice of OWASP Top 10 vulnerabilities Familiarity with Cyber Security measures & OWASP Top 10 Proactive Controls. Experience with solving labs such as Hack The Box, TryHackMe or PortSwigger Proven team leading experience, with the ability to guide, motivate, and manage a diverse team to achieve organizational goals. Strong client handling experience, demonstrating the ability to build and maintain professional relationships, manage expectations, and deliver high levels of client satisfaction. Great to have Any certifications related to Web Application Penetration Testing Familiarity with offensive and defensive security concepts Familiarity with offensive toolkits used for network and web application penetration testing. Candidate Profile/ Criteria : TLDR - Passion > Education We don't require a B Tech or BSc degree, but plenty of the team has them. We always look at capabilities and experience first. About Security Brigade:- Security Brigade is a pure-play information security consulting rm specializing in manual testing. Founded on the core belief that "Great audits are done by great auditors-not expensive tools", Security Brigade's approach is built around strong processes that enable auditors to conduct in- depth manual security audits. Security Brigade is based out of Mumbai, India and was founded in December 2006. It conducts thousands of audits a year for organizations such as: MakeMyTrip, Network 18, Tata Group, HDFC, Vodafone, IRDA, Reliance Money, Netmagic Solutions among many others. For more information, visit www.securitybrigade.com Security Brigade a CERT-In empanelled founded on the core belief that "Great audits are done by great auditors - not expensive tools". Our proprietary E.D.I.T.E platform provides a work flow based testing engine that encapsulates the complete audit process. It allows expert auditors to focus on in-depth manual testing while assisted by a combination of proprietary, open-source and commercial technology.