Web Application Penetration Testing

Job Title: Web Application Penetration Tester

Experience: 5-10 Years

Location: Gurgaon / Greater Noida / Hyderabad

Working Hours: Afternoon Shift (2:00 PM to 10:30 PM)

Salary Range: ₹6 LPA to ₹20 LPA

Job Description:

We are seeking a highly skilled and experienced Web Application Penetration Tester to join our team. The ideal candidate will have a deep understanding of application security, a passion for uncovering vulnerabilities, and the ability to deliver actionable insights to stakeholders.

Responsibilities:

• Perform high-quality web application penetration tests, ensuring all project deadlines are met.
• Identify and exploit vulnerabilities in web applications, including those missed by automated tools.
• Validate security tool output, identify false positives, and create detailed proof-of-concept (PoC) reports to demonstrate vulnerabilities.
• Research and integrate new tools, techniques, and methodologies to enhance penetration testing processes.
• Generate detailed, high-quality reports that communicate findings clearly to both technical and non-technical stakeholders.
• Collaborate with application development teams to explain vulnerabilities, their potential impacts, and high-level remediation strategies.
• Stay updated on emerging threats, attack techniques, and industry best practices to maintain cutting-edge skills.

Required Skills and Expertise:

• Technical Expertise:
  
• Deep knowledge of security vulnerabilities, attack vectors, and mitigation strategies.
• Proficiency in manual and automated penetration testing of web applications.
• Strong understanding of OWASP Top 10 vulnerabilities and web application architecture.
• Familiarity with web services, distributed systems, and database security concepts.
• Analytical Skills:
  
• Ability to analyze and interpret security tool outputs and identify vulnerabilities beyond automated findings.
• Expertise in crafting effective PoC exploits to demonstrate vulnerabilities to stakeholders.
• Communication Skills:
  
• Proven ability to generate concise, high-quality reports.
• Strong communication skills to present technical findings to non-technical stakeholders effectively.
• Tools and Technologies:
  
• Experience with industry-standard security tools (e.g., Burp Suite, OWASP ZAP, Metasploit, and others).
• Familiarity with scripting languages (e.g., Python, Bash) for developing custom testing tools and automating tasks.

Preferred Qualifications:

• In-depth understanding of security in native and web applications.
• Experience in working with Web Services.
• Certifications such as CEH, OSCP, or GWAPT will be an added advantage