Penetration Testing And Application Security

Role Description

This is an on-site Penetration Testing and Application Security Professional role based in Hyderabad. The position involves planning and executing penetration tests on web, mobile, and other applications, as well as assessing infrastructure and APIs for security weaknesses.

Key Responsibilities

• Planning and executing penetration tests on web, mobile, and other applications.
• Assessing infrastructure and APIs for security weaknesses.
• Designing and documenting test cases.
• Performing manual and automated security tests.
• Analyzing results.
• Preparing clear reports with remediation recommendations.
• Collaborating with development and QA teams to validate fixes.
• Supporting secure coding practices.
• Communicating complex technical findings in an understandable manner.
• Continuously researching new vulnerabilities, tools, and techniques to ensure testing approaches remain current and effective.

Requirements & Tech Stack

• Penetration testing tools and frameworks: Burp Suite, OWASP ZAP, Nmap, Metasploit (highly beneficial).
• Knowledge of secure coding practices.
• Knowledge of common vulnerabilities, such as OWASP Top 10.
• Knowledge of application security standards.

Qualifications

• Strong Analytical Skills to evaluate vulnerabilities, interpret test results, and prioritize remediation efforts.
• Testing and Software Testing skills to design and execute security tests across applications and systems.
• Skills in creating and maintaining detailed Test Cases that cover functional, non-functional, and security scenarios.
• Effective Communication skills to convey technical findings to both technical and non-technical stakeholders.
• A degree in Computer Science, Information Security, or a related field, or equivalent practical experience, is advantageous.
• Industry certifications such as CEH, OSCP, or similar security credentials are a plus.