Senior Consultant

SISA; Bengaluru; On-site; INR 1,200,000 - 2,000,000; Full time

Job summary

SISA in Bengaluru is seeking an experienced Penetration Tester to assess web, mobile, API, and thick-client applications for security weaknesses. You will perform automated and manual code reviews, identify OWASP Top 10 risks, and collaborate with developers to remediate flaws.

The role requires 4–6 years of hands-on testing experience, with OSCP as a mandatory credential and additional certifications such as CEH, CompTIA, PenTest+ or GPEN welcomed. BE/B.Tech or M.Tech in CS/IS is expected.

Qualifications

• 4–6 years of relevant experience in penetration testing.
• Mandatory OSCP certification.
• BE/B.Tech in Computer Science or Information Science OR M.Tech in Computer Science or Information Science
• Certifications: CEH, CompTIA, PenTest+, GPEN, OSCP, CREST CRT preferable

Responsibilities

• Conduct penetration testing on web, mobile (android + ios), API, and thick-client applications to identify security weaknesses.
• Conduct automated and manual secure code review.
• Identify and exploit vulnerabilities such as OWASP Top 10, SANS Top 25, and business logic flaws.
• Client interaction on project updation/status.
• Collaborate with developers and product teams for remediation support.
• Perform retest post confirmation on the fixes.
• Follow-up with stakeholders on remediation of open vulnerabilities

Job description

• Conduct penetration testing on web, mobile(android +ios), API, and thick-client applications to identify security weaknesses
• Conduct automated and manual Secure code review
• Identify and exploit vulnerabilities such as OWASP Top 10, SANS Top 25, and business logic flaws.
• Client interaction on project updation/status
• Collaborate with developers, product teams for Remediation support
• Perform retest post confirmation on the fixes
• Follow-up with the relevant stakeholders on the remediation of open vulnerabilities

4-6 Years

Mandatory (OSCP)

Roles And Responsibilities

• Conduct penetration testing on web, mobile(android +ios), API, and thick-client applications to identify security weaknesses
• Conduct automated and manual Secure code review
• Identify and exploit vulnerabilities such as OWASP Top 10, SANS Top 25, and business logic flaws.
• Client interaction on project updation/status
• Collaborate with developers, product teams for Remediation support
• Perform retest post confirmation on the fixes
• Follow-up with the relevant stakeholders on the remediation of open vulnerabilities

Mandatory Skills Required For The Role

Web, API and Mobile Penetration Testing

Proficiency With Penetration Testing Tools Such As

Burp Suite, OWASP ZAP, Postman, Nmap, SQLMap, Metasploit, Echo mirage

Mobile testing tools (e.g., MobSF, Frida) is a plus.

Good understanding on OWASP Top 10, SANS CWE Top 25, NIST standards.

Good written and spoken communication skills

Ability to do report walkthrough with relevant stakeholder

Understanding of programming languages such as PHP, HTML, javascript, etc

Education Requirements

BE/B.Tech in Computer Science or Information Science Or M.Tech in Computer Science or Information Science

Certifications: CEH, CompTIA, PenTest+, GPEN, OSCP, CREST CRT preferable