Conduct application security testing (manual + automated) and provide recommendations toward the mitigation of vulnerabilities. Primary skills should be web, mobile application, and API security testing
Black/Grey box testing on Web, Mobile, API, and thick client applications
Develop scripts, framework, and custom codes to automate scans using open-source tools
Knowledge of software design and development, software and network architecture, protocols, and standards
Conduct Vulnerability Assessments of Network and Security Devices using various open-source and commercial tools
Map out networks, and discover ports and services running on the exposed network and security devices
Conduct penetration tests and launch exploits using various tools and scripts
Research and maintain proficiency in computer network exploitation, tools, techniques, countermeasures, and trends in computer network vulnerabilities, data hiding, network security, and encryption
Analyse scan reports and suggest remediation/mitigation plans
Review software posture and work with operations to plan code version upgrade requirements of supported security and network devices
Perform Advanced technical analysis on intrusions
Audit configuration of Network and Security devices
Requirements
Years of experience required 1-2 years of experience only,
