Security Consultant

Payatu Technologies Pvt Ltd; Pune District; On-site; INR 500,000 - 700,000; Full time

Job summary

Payatu Technologies Pvt Ltd in Pune is looking for a web application security professional with 1-2 years of experience. You will conduct security assessments of web applications and services, document findings, and provide remediation strategies.

The ideal candidate has a strong grasp of application and network protocols, web application security concepts, and penetration testing skills. Excellent communication skills are essential as you'll articulate technical concepts in business terms.

Qualifications

• 1-2 years of experience in web application and web service security assessment.
• Stronghold on web application security concept and penetration testing skill.
• Good command of at least one programming language.

Responsibilities

• Conduct security assessments of web applications and services.
• Deliver detailed documentation of findings.
• Provide remediation for identified vulnerabilities.

Skills

Application and network protocols

Web application security concepts

Programming language proficiency

Understanding of OWASP Top 10

Penetration testing experience

Report writing and presentation skills

Job description

What we look for

• Your expertise is your primary qualification, not your degree or certification
• Your publicly known contributions are your credentials
• Papers you have written, tools you have developed are your references
• Your write-up reflects your interests and ethics
• Your published exploits, your CTF scores and hall of fame listings are the testimonies of your work
• Your research paper published and presented at conferences
• You are learning from the community and enthusiastically contributing back.

What you will do

• Security assessment of web application and web service on various platforms
• Back your findings with Proof-of-concept exploits
• Collect evidence and maintain a detailed write-up of the findings
• Understand and explain the results with impact on business and compliance status
• Explain and demonstrate vulnerabilities to application/system owners
• Provide appropriate remediation and mitigations of the identified vulnerabilities
• Individually or collaboratively review the system designs, source code, configurations, communications for security gaps.
• Deliver results within stipulated timelines.
• Sharpen your saw with continuous research, learning, training on the latest tools and techniques, keeping up with new research and sharing the same with the ecosystem.
• Communicate well using verbal and written skills, within and out of the team

The skill you should have

• Strong fundamental of application and network protocols
• Stronghold on Web application security concept and penetration testing skill
• Good command of at least one programming language
• Good understanding of OWASP Top 10 and other web-related vulnerabilities as well as logic flaws
• Hands-on experience in performing penetration testing of web-based application preferably in the financial domain
• Good to have experience in working alongside the development/QA teams
• Good report writing and presentation skills
• Should be able to suggest optimum security improvements to application components

You should apply if

• 1-2 years of experience in web application and web service security assessment
• You have a history of publishing or presenting good research
• You have the knack of finding security bugs in everything you touch
• You like automating stuff
• You like writing tools
• You have excellent written and verbal communication skills and ability to express your thoughts clearly
• You have the skill to articulate and present technical things in business language
• You can work independently as well as within a team and meet project schedule and deadlines
• You have Strong problem solving, troubleshooting and analysis skills
• You are passionate about your area of expertise and self-driven
• You are comfortable working in a dynamic and fast-paced work environment
• You are Self-driven, proactive, hardworking, team-player
• You are working on something on your own in your field apart from official work