SISA Information Security - Associate Consultant - Application Security

Associate Consultant : 4-8 Years. Roles And Responsibilities : - Conduct penetration testing on web, mobile (android + ios), API, and thick-client applications to identify security weaknesses. - Conduct automated and manual Secure code review. - Identify and exploit vulnerabilities such as OWASP Top 10, SANS Top 25, and business logic flaws. - Client interaction on project updation/status. - Collaborate with developers, product teams for Remediation support. - Perform retest post confirmation on the fixes. - Follow-up with the relevant stakeholders on the remediation of open vulnerabilities. Mandatory Skills Required For The Role : - Web, API and Mobile Penetration Testing. - Proficiency With Penetration Testing Tools Such As : 1. Burp Suite, OWASP ZAP, Postman, Nmap, SQLMap, Metasploit, Echo mirage. 2. Mobile testing tools (e.g., MobSF, Frida) is a plus. - Good understanding on OWASP Top 10, SANS CWE Top 25, NIST standards. - Good written and spoken communication skills. - Ability to do report walkthrough with relevant stakeholder. - Understanding of programming languages such as PHP, HTML, javascript, etc. Education Requirements : - BE/B.Tech in Computer Science or Information Science Or M.Tech in Computer Science or Information Science. - Certifications: CEH, CompTIA, PenTest+, GPEN, OSCP, CREST CRT preferable.