Duties and responsibilities:
 

• Conduct vulnerability Assessment and Penetration Testing for web applications,
• Network, Web/ NW API, mobile applications, thick-client applications, Wireless and handhold devices
• Conduct a security configuration review for web, mobile and thick -client applications
• Conduct configuration reviews for network devices including server OS, DB, Firewall, routers, Switches and other security devices/components
• Conduct source-code review using automated and manual approach
• Conduct threat base / incident base investigation to identify the root cause
• Analyse data, such as logs or packets captures, from various sources within the corporate / enterprise and prepare conclusions regarding past and future security incidents
• Conduct red team assessment using latest techniques
• Conduct cyber-attack simulations as part of the RED team activity
• Work with implementation/ product partner and manage the project/ timelines
• Prepare and present the assessment / audit reports to management and client
• Ensure timely delivery of status updates and final reports to clients
• Ensure high quality service delivery for security compliance
• Experience in scheduling scans and processing the vulnerability reports
• Keep oneself updated on the latest IT Security news, exploits, hacks

Requirements / Skills:
 

• Minimum Bachelor degree in Computer Science / IT
• 7 to 9 years of hands-on experience in VAPT. (required)
• One or more security certifications: OSCP, CEH, GPEN, eJPT
• Hands-on experience in conducting Vulnerability Assessment and Penetration testing of web applications, thick client applications, mobile applications, API and network
• Should have knowledge of security standards, methodologies, frameworks and industry best practises.
• Understanding of web-based application (OWASP Top 10) vulnerabilities
• Understanding of TCP/IP network protocols
• Should be familiar with the pentesting tools such as Burp Suite, Tenable Nessus, nmap, SQLMap etc
• Should have understanding on security controls under NIPS, WAF, SIEM, decoy, EDR solutions etc
• Ability to multitask and work independently with minimal direction / supervision and maximum accountability.

Education

Any Graduate