Penetration Tester

Penetration Tester\- VAPT

Certifications Mandatory

OSCP, CREST, GXPN, GPEN

Experience: 4\-5yr experience

Location – Pune/Bangalore (Hybrid)

Job Responsiblities

\* Develop and execute security testing project plans.

\* Manual and automated security testing of Web applications, APIs, and Mobile Applications.

\* Network VAPT

\* Static and Dynamic testing (SAST \& DAST) of thick clients / applications

\* Develop Proof\-of\-Concept (PoC) for the identified vulnerabilities.

\* Provide remediation guidance to identified vulnerabilities.

\* Incorporate metrics providing comprehensive insight about the security posture of an organization that will help senior management with decision making.

\* Build and maintain strong relationships with key stakeholders.

Technical Skillsets (Mandatory)

\* Hands on experience in Penetration Testing

\* Strong analytical and problem\-solving skills and the ability to explain complex technical concepts in a clear and concise manner and to provide remediation recommendations.

\* Knowledge of / or experience with both Enterprise and open\-source offensive security tools for reconnaissance, scanning, exploitation

\* Sound understanding of security frameworks (OWASP Top 10, NIST, MITRE ATT\&CK)

Technical Skillsets (Preferred)

\* Proficiency in a programming language(s) (e.g. Python, Ruby, Perl, PowerShell)

\* Exposure to DevSecOps, Security Architecture review and Network Security assessment would be a bonus.

\* Hands\-on experience in Red Team Exercises, Threat Hunting, OSINT and Threat Modelling

\* Non Technical Skillsets (Preferred)

\* Estimate Project efforts and meet delivery milestones and deadlines

\* Excellent and effective report writing and verbal communication skills

\* Deliver results within stipulated time\-lines

\* Team Player with good interpersonal skills

\* Should be able to work independently with minimum and least supervision in complex, dynamic and challenging environment.

\* Self\-driven and self\-managed technical team leader.

\* Communicate project requirements and influence stakeholders with minimal supervision.