Application Security Professional

Keka Technologies; Bengaluru; On-site; INR 500,000 - 900,000; Full time

Job summary

Keka Technologies in Bengaluru seeks an Associate Consultant to perform comprehensive penetration testing across web, mobile, API and thick-client platforms. You will conduct secure code reviews, identify vulnerabilities and collaborate with developers for remediation.

Qualifications include BE/BTech or MTech in CS/Info Science and certifications such as CEH, OSCP or GPEN are preferred. Strong communication and report walkthrough skills are essential for client updates.

Qualifications

• Bachelor's or Master's degree in CS/Information Science or related field.
• BE/BTech or MTech with strong penetration testing basics.
• Certifications such as CEH, CompTIA, PenTest+, GPEN, OSCP, CREST CRT preferred.

Responsibilities

• Conduct penetration testing on web, mobile (Android/iOS), API, and thick-client apps to identify security weaknesses.
• Perform automated and manual secure code reviews.
• Identify and exploit vulnerabilities including OWASP Top 10, SANS Top 25, and business logic flaws.
• Interact with clients on project status and updates.
• Collaborate with developers and product teams for remediation support.
• Retest fixes after confirmation and follow up with stakeholders.

Skills

Web/API/Mobile Pentest

Burp Suite

OWASP Top 10

OWASP ZAP

MobSF

Frida

Nmap

SQLMap

Metasploit

Postman

Echo Mirage

Education

BE/B.Tech in CS/Info Science

M.Tech in CS/Info Science

Tools

Kali Linux

MobSF

Job description

Associate Consultant

2 - 4 Years

Roles and Responsibilities:

• 1. Conduct penetration testing on web, mobile(android +ios), API, and thick-client applications to identify security weaknesses
• 2. Conduct automated and manual Secure code review
• 3. Identify and exploit vulnerabilities such as OWASP Top 10, SANS Top 25, and business logic flaws.
• 3. Client interaction on project updation/status
• 5. Collaborate with developers, product teams for Remediation support
• 6. Perform retest post confirmation on the fixes
• 6. Follow-up with the relevant stakeholders on the remediation of open vulnerabilities

Mandatory Skills required for the role:

Web, API and Mobile Penetration Testing

Proficiency with penetration testing tools such as:

• Burp Suite, OWASP ZAP, Postman, Nmap, SQLMap, Metasploit, Echo mirage
• Mobile testing tools (e.g., MobSF, Frida) is a plus.
• Good understanding on OWASP Top 10, SANS CWE Top 25, NIST standards.

Good written and spoken communication skills

Ability to do report walkthrough with relevant stakeholder

Understanding of programming languages such as PHP, HTML, javascript, etc

Education Requirements:

BE/B.Tech in Computer Science or Information Science Or M.Tech in Computer Science or Information Science

Certifications: CEH, CompTIA, PenTest+, GPEN, OSCP, CREST CRT preferable

Required Skills

• Decision-Making
• Cybersecurity Strategy