5-7 years of experience in vulnerability assessment and security testing.
Key Responsibilities:
- Perform vulnerability assessments and security testing on web applications, servers, networks, and cloud infrastructure.
- Identify, analyze, and report security vulnerabilities with remediation recommendations.
- Conduct VAPT and basic penetration testing activities.
- Perform SAST DAST code security testing using tools like SonarQube Lint and Fortify.
- Use security tools for scanning and monitoring vulnerabilities.
- Coordinate with development and infrastructure teams for issue resolution and closure.
- Prepare security assessment reports and maintain compliance documentation.
Technical Skills:
- Hands-on experience with tools like Nessus, Burp Suite, Qualys, OWASP ZAP, Nmap, SonarQube Lint, Fortify, etc.
- Understanding of OWASP Top 10, CVEs, and common security threats.
- Knowledge of network security, firewalls, WAF, and endpoint security.
- Familiarity with Linux/Windows environments and basic scripting.
- Understanding of cloud security concepts (AWS/Azure/GCP) is preferred.
- Robust analytical and troubleshooting skills with reporting ability.
- Attention to detail and risk assessment mindset.