Roles and Responsibilities

Penetration Testing:
Conduct comprehensive penetration testing on web applications, mobile applications (Android/iOS), and APIs.
Perform cloud penetration testing, specifically targeting AWS environments.
Execute reverse engineering on mobile applications to identify vulnerabilities and potential security flaws.

Vulnerability Assessment:
Perform vulnerability assessments on applications and cloud infrastructure, identifying and prioritizing security risks.
Utilize industry-standard tools and techniques to uncover and document security vulnerabilities.

Incident Response:
Respond to security incidents and issues raised by CERT-In (Indian Computer Emergency Response Team) and other regulatory bodies.
Provide rapid analysis and remediation recommendations to mitigate any discovered vulnerabilities.

Security Frameworks & Compliance:
Apply OWASP Top 10 frameworks for Web Applications, APIs, and Mobile Apps to ensure security best practices.
Implement and adhere to the CIS AWS Foundations Benchmark v3.0.0 for securing AWS cloud settings.

Experience Criteria
3+ years of experience in IT industry




Proven experience in penetration testing across multiple platforms, including web, mobile, and cloud.
Solid understanding of OWASP Top 10 security risks and the ability to apply them in practical scenarios.
Experience with reverse engineering of mobile applications and incident response management.

Desirable Certifications:
AWS Certified Cloud Practitioner.
AWS Certified Security - Specialty.

Preferred Skills:
Proficient in using penetration testing tools and techniques.
Deep understanding of cloud security, especially within AWS environments.
Solid analytical and problem-solving skills.
Excellent communication skills with the ability to explain complex security issues to both technical and non-technical stakeholders.
Experience with security tools such as Burp Suite, Metasploit, and Nmap.
Familiarity with regulatory requirements and standards like CERT-In guidelines.
Knowledge of secure coding practices and secure software development lifecycle (SDLC).

📌 Security Tester Delhi
🏢 Digital India
📍 Delhi