A formal degree is not required; candidates may be degree-holders or self-taught.
Strong reading, writing, and communication skills are required.
Required Experience
Minimum 5 years of working experience.
Knowledge of application security and industry data security regulations.
Knowledge of identifying threats and controls without bias.
Knowledge in security testing of Web application, Web Services, Mobile applications and client base applications.
Roles & Responsibilities
Communicate with client/customer to gather information required for security audit of application.
Perform Vulnerability Assessment of Static & Agile applications in accordance with OWASP standards using manual techniques and also automated tools like acunetix.
Prepare Level 1 report which has detailed POC steps of vulnerabilities with recommendation.
Report the identified vulnerabilities to clients/customers and remediating appropriate mitigations.
Follow up on the fixes.
Conduct re-assessment after mitigating the vulnerabilities found in the Level 1 phase.
Provide documentation of all the vulnerabilities on final Level 2 report and Clearance
Certificate which is required for the hosting of application