REF51674E- Application Security - VAPT - 8 to 11 years - MumbaiGurugram
REF51674E- Application Security - VAPT - 8 to 11 years - MumbaiGurugram
Employer Active
Job Alert
You will be updated with latest job alerts via email
Share
Job Alert
You will be updated with latest job alerts via email
Job Description
- Core Responsibilities of Conduct comprehensive security assessments of web applications to identify vulnerabilities such as SQL injection XSS CSRF and other OWASP
- Top 10 vulnerabilities. With bypass methods o Work closely with developers to provide actionable recommendations for mitigating identified issues.
- Perform security assessments on RESTful and SOAP APIs to identify security flaws including improper authentication authorization and data exposure.
- Ensure APIs are securely integrated with other systems and follow best security practices.
- Conduct security testing on mobile applications (iOS and Android) to detect vulnerabilities like insecure storage weak encryption and insecure communication.
- Collaborate with mobile development teams to provide secure coding practices and remediation guidance.
- Perform penetration tests on thick client applications focusing on clientserver communication application logic and security controls.o Identify weaknesses and recommend appropriate security enhancements.
Required Skills:
Extensive experience in Web Application Security and penetration testing.
Strong expertise in API Security with knowledge of common vulnerabilities and attack vectors.
Handson experience with Mobile Application Security testing (iOS and Android).
Proficiency in Thick Client Security assessment.
Familiarity with tools such as Burp Suite OWASP ZAP Postman Frida Qualys and other relevant penetration testing tools.
Knowledge of OWASP SANS and other relevant security frameworks.
Strong analytical skills and attention to detail.
Vulnerability Management skills with experience using tools like Qualys would be a plus point.
Additional Skills:
Excellent communication skills (written and verbal) for preparing and delivering security reports.
Ability to work independently and as part of a team.
Strong problemsolving skills and a proactive approach to identifying security risks.
Continuous learning mindset with a passion for staying ahead in the field of cybersecurity.
Preferred Qualifications:
We prefer candidates with certifications such as OSCP EWPTX CRTP CRTE or CPTS.
Qualifications
1. Bachelors Degree 2. Candidates with either of certifications such as OSCP EWPTX CRTP CRTE or CPTS would be preferred.
Remote Work :
Yes
Employment Type :
Fulltime
Employment Type
Remote
