Web Application Penetration Testing Consultant

Key Skills:

Roles & Responsibilities:

• Conduct manual application penetration tests on web applications, internal applications, APIs, and mobile applications to discover and exploit vulnerabilities.
• Independently research new vulnerabilities in systems and software, modifying and customizing tools, known exploits, POCs, and scripts to meet operational requirements.
• Stay up-to-date with the latest attack techniques, tools, and emerging threats in the cybersecurity landscape.
• Present technical reports to clients, explaining testing outcomes and providing detailed insights and recommendations.
• Collaborate effectively with cross-functional teams, including developers, IT operations, and business stakeholders, to integrate security best practices into project workflows.
• Provide mentorship and guidance to junior security staff, fostering a culture of proactive security awareness within the organization.
• Maintain a strong understanding of web applications, cryptography, various operating systems, and security technologies.
• Demonstrate expertise in exploiting Microsoft platforms used in enterprise environments, such as Windows Servers, Active Directory Certificate Service, and Azure.
• Relevant certifications such as GWAPT, OSCP, OSEP, CRTP, CRTO, OSWA are strongly preferred.

Experience Requirement:

• 4-8 years of hands-on experience in penetration testing of web, mobile, and API applications.
• Proven ability to identify and exploit vulnerabilities through manual testing techniques.
• Practical exposure to enterprise security environments, including Microsoft-based infrastructures.
• Experience in customizing exploit tools and developing proof-of-concept scripts.
• Strong communication and reporting skills, with the ability to present findings to technical and non-technical stakeholders.

Education: