SISA Information Security - Associate Consultant - Application Security

Associate Consultant : 4-8 Years.

Roles And Responsibilities

• Conduct penetration testing on web, mobile (android + ios), API, and thick-client applications to identify security weaknesses.
• Conduct automated and manual Secure code review.
• Identify and exploit vulnerabilities such as OWASP Top 10, SANS Top 25, and business logic flaws.
• Client interaction on project updation/status.
• Collaborate with developers, product teams for Remediation support.
• Perform retest post confirmation on the fixes.
• Follow-up with the relevant stakeholders on the remediation of open vulnerabilities.

Mandatory Skills Required For The Role

• Web, API and Mobile Penetration Testing.
• Proficiency With Penetration Testing Tools Such As :
• Burp Suite, OWASP ZAP, Postman, Nmap, SQLMap, Metasploit, Echo mirage.
• Mobile testing tools (e.g., MobSF, Frida) is a plus.
• Good understanding on OWASP Top 10, SANS CWE Top 25, NIST standards.
• Good written and spoken communication skills.
• Ability to do report walkthrough with relevant stakeholder.
• Understanding of programming languages such as PHP, HTML, javascript, etc.

Education Requirements

• BE/B.Tech in Computer Science or Information Science Or M.Tech in Computer Science or Information Science.
• Certifications: CEH, CompTIA, PenTest+, GPEN, OSCP, CREST CRT preferable. (ref:hirist.tech)