Cyber Testing Supervisor - SAST/DAST (6-10 yrs)

Job Title : Cyber Testing Supervisor

Experience : 6 to 10 Years

Location : Bangalore, Hyderabad

Job Summary :

• We are looking for an experienced and skilled Cyber Testing Supervisor to join our Security and Privacy Risk Consulting team. The ideal candidate will have expertise in manual and automated application penetration testing, security assessments, and vulnerability identification.
• As a key member of the Security, Privacy, and Risk Consulting team, you will work with clients across various industries, empowering them with high-quality security assessments to mitigate risks and improve their security posture.

• Perform security assessments, including static application security testing (SAST) and dynamic application security testing (DAST).
• Conduct manual penetration testing on web applications, network devices, and other systems.
• Collaborate with clients in a dynamic environment, working with various technology stacks and cloud platforms.
• Develop, enhance, and interpret security standards and guidelines.
• Promote and demonstrate security best practices, including secure development and cloud security.
• Assist in developing remediation recommendations for identified security vulnerabilities.
• Clearly articulate security findings and recommendations to senior management and clients, both verbally and in written reports.
• Identify opportunities for security improvements within client environments.
• Stay up-to-date with the latest security trends, emerging threats, and industry best practices.
• Supervise and manage engagement activities for junior staff working on security testing engagements.

• Bachelor's degree in Computer Science, Engineering, or a related field (or equivalent work experience).
• 5+ years of experience in application security testing, code review, or web application development.
• Expertise in web security, vulnerability identification, and exploitation techniques.
• Strong scripting skills in Python, Ruby, or Perl.
• Experience with cloud platforms such as AWS and knowledge of cloud security best practices.
• Familiarity with development technologies such as Docker, CDK, Terraform, Java, Python, React, GraphQL, JavaScript, JSON, REST, etc.
• Technical background in application development, networking/system administration, or security testing.
• Experience using various security testing tools for SAST and DAST assessments.
• Excellent verbal and written communication skills.
• High degree of integrity, confidentiality, and adherence to company policies and security best practices.