Roles and Responsibilities

Penetration Testing:

- Conduct comprehensive penetration testing on web applications, mobile applications (Android/iOS), and APIs.
- Perform cloud penetration testing, specifically targeting AWS environments.
- Execute reverse engineering on mobile applications to identify vulnerabilities and potential security flaws.

Vulnerability Assessment:

- Perform vulnerability assessments on applications and cloud infrastructure, identifying and prioritizing security risks.
- Utilize industry-standard tools and techniques to uncover and document security vulnerabilities.

Incident Response:

- Respond to security incidents and issues raised by CERT-In (Indian Computer Emergency Response Team) and other regulatory bodies.
- Provide rapid analysis and remediation recommendations to mitigate any discovered vulnerabilities.

Security Frameworks & Compliance:

- Apply OWASP Top 10 frameworks for Web Applications, APIs, and Mobile Apps to ensure security best practices.
- Implement and adhere to the CIS AWS Foundations Benchmark v3.0.0 for securing AWS cloud environments.

Experience Criteria

- 3+ years of experience in IT industry




- Proven experience in penetration testing across multiple platforms, including web, mobile, and cloud.
- Strong understanding of OWASP Top 10 security risks and the ability to apply them in practical scenarios.
- Experience with reverse engineering of mobile applications and incident response management.

Desirable Certifications:

- AWS Certified Cloud Practitioner.
- AWS Certified Security - Specialty.

Preferred Skills:

- Proficient in using penetration testing tools and techniques.
- Deep understanding of cloud security, especially within AWS environments.
- Solid analytical and problem-solving skills.
- Excellent communication skills with the ability to explain complex security issues to both technical and non-technical stakeholders.
- Experience with security tools such as Burp Suite, Metasploit, and Nmap.
- Familiarity with regulatory requirements and standards like CERT-In guidelines.
- Knowledge of secure coding practices and secure software development lifecycle (SDLC).

📌 Security Tester (Delhi)
🏢 Digital India
📍 Delhi