Web App Pentester (OSCP)

As a Senior Software Engineer in the Account_Core_Technologies_Product_Security department in Bengaluru, you will be responsible for the following key activities: - Hands-on penetration testing - Development of security verification tools - Security design reviews of web applications and network/cloud deployments - Security code reviews of web applications and/or web APIs - Writing clear vulnerability reports and providing guidance to development teams - Documentation of knowledge and findings in the form of guidelines, checklists, and examples - Owning the project from beginning to end You should possess the following qualifications: - Strong hands-on penetration skills - Deep knowledge of web technologies such as HTML5, Java, JavaScript, Tomcat, etc. - Understanding of application security mechanisms like authentication, authorization, data validation, output sanitization/encoding, and encryption - Excellent grasp of web applications, web browsers, web servers, and frameworks - Experience with penetration testing tools like Burp Suite, Nessus, sqlmap, Nmap, Wireshark - Good knowledge of network protocols, protection techniques, and bypass methods - Deep understanding of web service technologies (WebSockets, SOAP, REST, JSON, XML) and security schemes (OAuth, SAML) - Working knowledge of scripting languages or frameworks like Python, Ruby, NodeJS, PHP - Familiarity with cryptographic principles, fuzzing, and security code review - Knowledge of RDBMS systems like MySQL, PostgreSQL, ORACLE - Strong analytical skills and out-of-the-box thinking - Experience with Linux and Windows OS - Proficiency in English with good communication and writing skills Desirable skills include experience with AWS, GCP, MS Azure, and mobile application security. The job starts ASAP with both permanent and temporary contract options, and the possibility of extension based on performance. The ideal candidate should have 4 to 6 years of experience and hold an OSCP Certification, with expertise in reverse engineering and penetration testing.,