Application Security Professional

Sisa Information Security; Bengaluru; On-site; INR 900,000 - 1,500,000; Full time

Job summary

Sisa Information Security is seeking a security testing expert to conduct comprehensive penetration testing across web, mobile (Android/iOS), and API platforms, including thick-client apps. You will also perform secure code reviews and identify vulnerabilities following OWASP Top 10, SANS Top 25, and business logic flaws.

Client interaction and remediation support are part of the role. The candidate should demonstrate strong communication skills, report walkthrough ability, and familiarity with

Qualifications

• Web, API and Mobile pen testing experience required.
• Proficiency with industry-standard pentesting tools and methodologies.

Responsibilities

• Conduct web, mobile, API, and thick-client pen tests to identify vulnerabilities.
• Perform automated and manual secure code reviews.
• Identify and exploit vulnerabilities per OWASP Top 10, SANS Top 25, and business logic flaws.
• Interact with clients on project updates/status.
• Collaborate with developers and product teams for remediation support.
• Retest after fixes and follow up with stakeholders on remediation.

Skills

Web Penetration Testing

API Penetration Testing

Mobile Penetration Testing

OWASP Top 10

SANS CWE Top 25

NIST standards

Communication skills

Report walkthrough

Programming languages

HTML

JavaScript

Education

BE/B.Tech in CS or Info Science

M.Tech in CS or Info Science

CEH

CompTIA

PenTest+

GPEN

OSCP

CREST CRT

Tools

Burp Suite

OWASP ZAP

Postman

Nmap

SQLMap

Metasploit

Echo Mirage

MobSF

Frida

Job description

Roles and Responsibilities:

1. 1. Conduct penetration testing on web, mobile(android +ios), API, and thick-client applications to identify security weaknesses
2. 2. Conduct automated and manual Secure code review
3. 3. Identify and exploit vulnerabilities such as OWASP Top 10, SANS Top 25, and business logic flaws .
4. 3. Client interaction on project updation/status
5. 5. Collaborate with developers, product teams for Remediation support
6. 6. Perform retest post confirmation on the fixes
7. 6. Follow-up with the relevant stakeholders on the remediation of open vulnerabilities

Mandatory Skills required for the role:

Web, API and Mobile Penetration Testing

Proficiency with penetration testing tools such as:

Burp Suite, OWASP ZAP, Postman, Nmap, SQLMap, Metasploit, Echo mirage

Mobile testing tools (e.g., MobSF, Frida ) is a plus.

Good understanding on OWASP Top 10, SANS CWE Top 25, NIST standards .

Good written and spoken communication skills

Ability to do report walkthrough with relevant stakeholder

Understanding of programming languages such as PHP, HTML, javascript, etc

Education Requirements:

BE/B.Tech in Computer Science or Information Science Or M.Tech in Computer Science or Information Science

Certifications: CEH, CompTIA, PenTest+, GPEN, OSCP, CREST CRT preferable

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.