Security Tester

Eligibility Requirements

Bachelors degree in Computer Science, Information Technology, or a related field.

Professional certifications such as CEH (Certified Ethical Hacker), OSCP (Offensive Security Certified Professional), or CISSP (Certified Information Systems Security Professional) are

Strong understanding of web application security, mobile application security, and network security principles.

Familiarity with OWASP (Open Web Application Security Project) and SANS Top 25 vulnerabilities.

Proficiency in using security testing tools like Burp Suite, Nmap, Wireshark, and Metasploit for web application and server testing.

Experience with mobile application security testing using tools such as MobSF, APK tool, and Jadx.

Solid knowledge of Python programming language for developing scripts and automating security testing processes.

Understanding of SQL databases and ability to perform security assessments on databases.

Knowledge and experience in network vulnerability assessment and penetration testing (VAPT).

Job Description & Responsibilities

Conducting comprehensive security assessments, including vulnerability assessments and penetration testing, for web applications, mobile applications, and network infrastructure.

Identifying and prioritizing security vulnerabilities and recommending appropriate remediation measures.

Performing manual and automated security testing using industry-standard tools and techniques.

Reviewing source code for security vulnerabilities and providing recommendations for secure coding practices.

Collaborating with development teams to integrate security testing into the software development lifecycle.

Creating detailed reports documenting security findings, assessment methodologies, and recommendations for mitigation.

Staying up-to-date with the latest security vulnerabilities, exploits, and industry best practices.

Assisting in developing and maintaining security testing frameworks, scripts, and tools.

Participating in security incident response activities and providing technical expertise during security incidents.

Conducting security training and awareness sessions for development teams and other stakeholders.