05 Aug
|
Recognized
|
Mumbai
We are looking for a highly skilled Application Security Consultant to join our Offensive Security team. The ideal
candidate should have extensive hands -on experience performing penetration testing across up-to-date applications,
including Web, Mobile (Android & iOS), APIs, and Thick Client applications
This role requires an offensive mindset with the ability to identify complex security vulnerabilities, business logic
flaws, authentication and authorization weaknesses, and real -world attack paths beyond automated scanning. The
candidate should be capable of performing end -to -end authenticated security assessments and should possess strong
knowledge of external attack surface analysis. During authorized engagements, the engineer should be able to identify
alternative access paths to target applications by leveraging exposed assets, internet -facing services, misconfigurations,
publicly available information, credential exposure, or other legitimate attack vectors, wherever applicable within the
agreed scope. The ideal candidate is someone who enjoys solving complex security challenges, thinks like an attacker,
and can independently execute complete penetration testing engagements from reconnaissance through reporting.
Requirements
TECHNICAL SKILLS
- Web Application Security Testing
- Android Application Security Testing
- iOS Application Security Testing
- API Security Testing (REST, GraphQL, SOAP)
- Thick Client/Desktop Application Security Testing
- OWASP Top 10
- OWASP API Security Top 10
- OWASP Mobile Top 10
- Authenticated penetration testing
- Authentication, authorization, session management, access control, and business logic testing
- External network penetration testing and attack surface assessment
- Identifying alternate attack paths using publicly exposed infrastructure, internet -facing assets, credential exposure
(where authorized), or security misconfigurations
- Strong analytical and problem -solving skills
- Technical documentation and report -writing