Web Penetration Testing

Teamware Solutions; Bengaluru; On-site; INR 1,000,000 - 1,500,000; Full time

Job summary

A leading cybersecurity firm in India is looking for a skilled penetration tester to identify vulnerabilities in various applications. This role involves conducting manual penetration tests, researching new attack techniques, and presenting findings to clients. Ideal candidates have over 3 years of experience in cybersecurity with a strong focus on web applications and hold relevant certifications. The position includes mentoring junior staff and collaborating with cross-functional teams to enforce best security practices.

Qualifications

• 3+ years of professional experience in cybersecurity, focusing on Web application penetration testing.
• Strong understanding of web applications, cryptography, and security technologies.
• Experience in exploitation of Microsoft platforms in enterprise environments.

Responsibilities

• Perform manual application penetration tests to discover and exploit vulnerabilities.
• Research and stay up-to-date with the latest attack techniques and tools.
• Present technical reports to clients with detailed insights and recommendations.

Skills

Manual application penetration testing

Cybersecurity

Vulnerability research

Technical reporting

Cross-functional collaboration

Education

Relevant cybersecurity certifications

Job description

Responsibilities

• Perform manual application penetration tests on one or more of the following to discover and exploit vulnerabilities: web applications, internal applications, APIs and mobile applications
• Ability to independently research for new vulnerabilities in systems and software and modify and customize tools, known exploits, POCs and scripts to meet operational requirements.
• Research and stay up-to-date with the latest attack techniques, tools, and emerging threats.
• Present technical reports to clients, explaining the outcomes of the testing and providing detailed insights and recommendations.
• Collaborate effectively with cross-functional teams, including developers, IT operations, and business stakeholders to integrate security best practices seamlessly into project workflows.
• Provide mentorship and guidance to junior security staff and foster a culture of proactive security awareness within the organization.

Mandatory technical & functional skills

• Perform manual application penetration tests on one or more of the following to discover and exploit vulnerabilities: web applications, internal applications, APIs and mobile applications
• 3+ years of professional experience in cybersecurity, with a focus on Web application penetration testing.
• Strong understanding of web applications, cryptography, various operating systems and security technologies.
• Strong understanding of exploitation of Microsoft platform used in enterprise environment such as windows Servers, Active Directory Certificate Service, Azure, etc.
• Experience in one or more of the following a plus: Web application penetration testing, mobile application penetration testing application architecture and business logic analysis.
• Relevant certifications, such as GWAPT, OSCP, OSEP, CRTP, CRTO, OSWA, are strongly preferred.