Application Security

Sisainfosec; Bengaluru; On-site; INR 900,000 - 1,300,000; Full time

Job summary

Sisainfosec in Bengaluru, India, is hiring a security tester specializing in web, API and mobile penetration testing. The role requires hands-on testing across platforms and thorough secure code reviews, with emphasis on identifying OWASP Top 10, SANS Top 25, and NIST-aligned vulnerabilities.

Excellent communication with clients and cross-functional teams is essential for remediation and reporting. Certifications such as CEH, PenTest+, GPEN, OSCP or CREST CRT are preferred, along with BE/B.Tech

Qualifications

• Experience performing web, API and mobile penetration testing against applications.
• Proficiency with Burp Suite, OWASP ZAP, Postman, Nmap, SQLMap, Metasploit, Echo Mirage.
• Experience with mobile testing tools MobSF and Frida is a plus.
• Strong understanding of OWASP Top 10, SANS CWE Top 25, and NIST standards.
• Good written and spoken communication skills.
• Ability to report walkthrough with relevant stakeholders.
• BE/B.Tech or M.Tech in CS/IS; Certifications such as CEH, PenTest+, GPEN, OSCP, CREST CRT preferred.

Responsibilities

• Conduct penetration testing on web, mobile (android + ios), API, and thick-client applications to identify security weaknesses.
• Conduct automated and manual Secure code review.
• Identify and exploit vulnerabilities such as OWASP Top 10, SANS Top 25, and business logic flaws.
• Client interaction on project updates/status.
• Collaborate with developers and product teams for remediation support.
• Perform retest post confirmation on the fixes.
• Follow-up with the relevant stakeholders on the remediation of open vulnerabilities.

Skills

Web/API/Mobile Penetration Testing

Secure code review

OWASP Top 10 knowledge

Communication skills

Team collaboration

Education

BE/B.Tech in Computer Science or Information Science

M.Tech in Computer Science or Information Science

Tools

Burp Suite

OWASP ZAP

Postman

Nmap

SQLMap

Metasploit

Echo Mirage

MobSF

Frida

Job description

1.Conduct penetration testing onweb,mobile(android +ios), API, and thick-client applicationstoidentifysecurity weaknesses

2.Conductautomated and manualSecure code review

3.Identifyand exploit vulnerabilities such asOWASP Top 10, SANS Top 25, and business logic flaws.

3. Client interactionon projectupdation/status

5.Collaborate with developers, product teams forRemediation support

6. Perform retest post confirmation on the fixes

6. Follow-upwith the relevant stakeholders on the remediation of open vulnerabilities

Mandatory Skillsrequiredfor the role:

Web,APIand Mobile Penetration Testing

Proficiencywith penetration testing tools such as:

Burp Suite, OWASP ZAP, Postman, Nmap,SQLMap, Metasploit, Echo mirage

Mobile testing tools (e.g.,MobSF, Frida) is a plus.

Good understanding onOWASP Top 10, SANS CWE Top 25, NIST standards.

Good written and spoken communication skills

Ability to do report walkthrough with relevant stakeholder

Education Requirements:

BE/B.Techin Computer Science or Information Science OrM.Techin Computer Science or Information Science

Certifications:CEH,CompTIA,PenTest+,GPEN, OSCP, CREST CRTpreferable