Associate Penetration Tester Web and APIs
Associate Penetration Tester Web and APIs
Employer Active
Job Alert
You will be updated with latest job alerts via email
Share
Job Alert
You will be updated with latest job alerts via email
Job Description
Company: Security Lit Ltd
Location: Mumbai India
Position Type: Fulltime
Experience Required: 13 years
Immediate Joiners Preferred
At Security Lit Ltd a cybersecurity firm with New Zealand roots and a growing presence in India we are seeking an Associate Penetration Tester to enhance our team in Mumbai. This role specifically involves the use of a blackbox approach to evaluate the security of web applications and APIs.
Responsibilities:
Conduct blackbox penetration tests on web applications and APIs identifying and exploiting vulnerabilities.
Utilize both manual and automated tools and techniques to mimic realworld attack scenarios and uncover system weaknesses.
Apply diverse testing methodologies including vulnerability scanning penetration testing and security assessments.
Collaborate with development and infrastructure teams to gain insights into application architectures for better risk identification.
Create comprehensive reports detailing vulnerabilities their potential impacts and suggest actionable remediation strategies.
Stay updated with current security threats vulnerabilities and best practices to continuously improve testing methodologies.
Participate actively in team meetings and knowledgesharing sessions to contribute to the teams overall expertise and success.
Requirements
Requirements:
13 years of experience in penetration testing with a specific focus on black box testing of web applications and APIs.
Strong grasp of web technologies protocols and frameworks (e.g. HTTP HTML CSS JavaScript).
Proficiency in using tools and frameworks such as Burp Suite OWASP ZAP or similar for penetration testing.
Comprehensive knowledge of common web application vulnerabilities (e.g. OWASP Top 10 and techniques for their exploitation.
Familiarity with testing API security including aspects like authentication authorization and API endpoint vulnerabilities.
Capable of analyzing and interpreting security scan results discerning false positives and focusing on critical vulnerabilities.
Excellent communication skills for effectively relaying findings and recommendations to both technical and nontechnical stakeholders.
Relevant certifications (e.g. OSCP OSCE CEH) are a plus.
Selfdriven detailoriented and comfortable working independently or as part of a team.
Benefits
Security Lit Ltd offers a collaborative dynamic work environment providing opportunities for professional growth and development. Passionate individuals who are keen on making a significant impact in the cybersecurity domain are encouraged to apply.
Please note: Only candidates shortlisted for further assessment will be contacted.
Embark on a journey with us to create a safer digital world!
Required Experience:
IC
Employment Type
Full-Time
