SISA Information Security
Senior Consultant - Penetration Testing
- Compensation
- Not disclosed
- Location
- Bangalore
- Work setup
- Not specified
- Seniority
- Senior
- Employment
- Not specified
- Experience
- Not specified
- Category
- Security
- Posted
Skills
Full description
Mandatory Certification :
OSCP.
Roles And Responsibilities :
- Conduct penetration testing on web, mobile (android + ios), API, and thick-client applications to identify security weaknesses.
- Conduct automated and manual Secure code review.
- Identify and exploit vulnerabilities such as OWASP Top 10, SANS Top 25, and business logic flaws.
- Client interaction on project updation/status.
- Collaborate with developers, product teams for Remediation support.
- Perform retest post confirmation on the fixes.
- Follow-up with the relevant stakeholders on the remediation of open vulnerabilities.
Mandatory Skills Required For The Role:
- Web, API and Mobile Penetration Testing.
- Proficiency With Penetration Testing Tools Such As: Burp Suite, OWASP ZAP, Postman, Nmap, SQLMap, Metasploit, Echo mirage.
- Mobile testing tools (e.g., MobSF, Frida) is a plus.
- Good understanding on OWASP Top 10, SANS CWE Top 25, NIST standards.
- Good written and spoken communication skills.
- Ability to do report walkthrough with relevant stakeholder.
- Understanding of programming languages such as PHP, HTML, javascript, etc.
Education Requirements:
- BE/B.Tech in Computer Science or Information Science Or M.Tech in Computer Science or Information Science.
Certifications:
- CEH, CompTIA, PenTest+, GPEN, OSCP, CREST CRT preferable.