Application Security

SISA; Bengaluru; On-site; INR 750,000 - 1,100,000; Full time

Job summary

SISA is seeking an Associate Consultant in Bengaluru with 2–4 years of hands-on security testing experience. The role involves performing web, mobile, and API penetration testing, automating and conducting manual code reviews, and guiding remediation with developers and product teams.

You will interact with clients for project updates, conduct retests after fixes, and ensure vulnerabilities are remediated with clear documentation. Relevant CEH/OSCP-like certifications are preferred.

Qualifications

• Web, API and Mobile Penetration Testing experience
• Proficient with common security assessment methodologies and OWASP Top 10 guidance
• Ability to produce detailed vulnerability reports with remediation guidance

Responsibilities

• Conduct penetration testing on web, mobile, API and thick-client applications to identify security weaknesses
• Conduct automated and manual secure code reviews
• Identify and exploit vulnerabilities such as OWASP Top 10 and SANS Top 25
• Interact with clients on project updates and status
• Collaborate with developers and product teams for remediation support
• Perform retest post confirmation on fixes
• Follow-up with stakeholders on remediation of open vulnerabilities

Skills

Web, API and Mobile PenetrationTesting

Client communication

Remediation support

Retesting

Education

BE/B.Tech in Computer Science or Information Science

M.Tech in Computer Science or Information Science

CEH

CompTIA

PenTest+

GPEN

OSCP

CREST CRT

Tools

Burp Suite

OWASP ZAP

Postman

Nmap

SQLMap

Metasploit

Echo Mirage

MobSF

Frida

Job description

Associate Consultant

2 – 4 Years

Roles And Responsibilities

• Conduct penetration testing on web, mobile(android +ios), API, and thick-client applications to identify security weaknesses
• Conduct automated and manual Secure code review
• Identify and exploit vulnerabilities such as OWASP Top 10, SANS Top 25, and business logic flaws.
• Client interaction on project updation/status
• Collaborate with developers, product teams for Remediation support
• Perform retest post confirmation on the fixes
• Follow-up with the relevant stakeholders on the remediation of open vulnerabilities

• Conduct penetration testing on web, mobile(android +ios), API, and thick-client applications to identify security weaknesses
• Conduct automated and manual Secure code review
• Identify and exploit vulnerabilities such as OWASP Top 10, SANS Top 25, and business logic flaws.
• Client interaction on project updation/status
• Collaborate with developers, product teams for Remediation support
• Perform retest post confirmation on the fixes
• Follow-up with the relevant stakeholders on the remediation of open vulnerabilities

Mandatory Skills Required For The Role

Web, API and Mobile Penetration Testing

Proficiency With Penetration Testing Tools Such As

Burp Suite, OWASP ZAP, Postman, Nmap, SQLMap, Metasploit, Echo mirage

Mobile testing tools (e.g., MobSF, Frida) is a plus.

Good understanding on OWASP Top 10, SANS CWE Top 25, NIST standards.

Good written and spoken communication skills

Ability to do report walkthrough with relevant stakeholder

Understanding of programming languages such as PHP, HTML, javascript, etc

Education Requirements

BE/B.Tech in Computer Science or Information Science Or M.Tech in Computer Science or Information Science

Certifications: CEH, CompTIA, PenTest+, GPEN, OSCP, CREST CRT preferable