Web Penetration Tester Consultant
- orcapod
- 4 - 9 years
- Pune
- 6 months ago
- Email to a friend
- Report this job
Job Description
Job Title: WebPT P1 - Consultant
Location: Bangalore & Pune (Hybrid Role)
Contract Duration: 6 Months
Roles & Responsibilities:
- Perform automated testing of running applications and static code (SAST, DAST).
- Conduct manual application penetration tests on one or more of the following to discover and exploit vulnerabilities:
- Web applications
- Internal applications
- APIs
- Internal and external networks
- Mobile applications
- Experience in one or more of the following is a plus:
- Mobile application testing
- Web application pen testing
- Application architecture
- Business logic analysis
- Work on application tools to perform security tests, including:
- AppScan
- NetsSparker
- Acunetix
- Checkmarx
- Veracode
- BurpSuite
- OWASP ZAP
- Kali Linux
- Able to explain vulnerabilities such as:
- IDOR (Insecure Direct Object References)
- Second Order SQL Injection
- CSRF (Cross-Site Request Forgery)
- Provide root cause analysis and remediation guidance for identified vulnerabilities.
Mandatory Technical & Functional Skills:
- Minimum three (3) years of recent experience working with application tools to perform security tests:
- AppScan
- NetsSparker
- Acunetix
- Checkmarx
- Veracode
- BurpSuite
- OWASP ZAP
- Kali Linux (or equivalent)
- Minimum three (3) years of performing manual penetration testing and code review against:
- Web applications
- Mobile apps
- APIs
- Minimum three (3) years of experience working with both technical and non-technical audiences in reporting results and leading remediation conversations.
- Preferred: One year of experience in the development of web applications and/or APIs.
- Ability to identify and work with new tools/technologies to plug and play on client projects as needed to solve the problem at hand.
Certifications (Preferred but not required):
- GWAPT (GIAC Web Application Penetration Tester)
- CREST (Certified Testing Professional)
- OSCP (Offensive Security Certified Professional)
- OSWE (Offensive Security Web Expert)
- OSWA (Offensive Security Web Application)
This is a 6-month contract role with hybrid work arrangements in Bangalore and Pune.
Job Classification
Industry: Law Enforcement / Security ServicesFunctional Area / Department: IT & Information SecurityRole Category: IT SecurityRole: Cyber SecurityEmployement Type: ContractContact Details:
Company: Forbes GlobalLocation(s): Pune
Keyskills: Appscan Owasp Zap NetsSparker Checkmarx Kali Linux CREST GWAPT OSWA WebInspect Security Testing Oscp OSWE IDOR Dast Acunetix Veracode Sqlmap Csrf Sast Vulnerability Netsparker Burp Suite Penetration Testing OWASP API Network Penetration Testing Manual Penetration Testing
Similar positions
orcapod
Company Details: Orcapod is an IT industry-focused Staffing & Recruitment company founded by senior industry professionals coming from reputed international companies. Orcapod has a top-class client base in the Indian IT industry. Orcapod is a fast-growing organization and has operations in Ban...
Job Listings
We are in open beta version of website, please let us know if any issues, at: info(at)indigojobs.in