Key ResponsibilitiesWeb Application Security Testing
Identify vulnerabilities such as SQL Injection, Cross-Site Scripting (XSS), CSRF, SSRF, IDOR, Authentication Bypass, and Remote Code Execution.
Validate business logic flaws and privilege escalation issues.
Test session management, access controls, and file upload security.

Mobile Application Security Testing
Analyze mobile app binaries and runtime behavior.
Evaluate secure storage, certificate pinning, root/jailbreak detection, and API protections.
Verify app attestation and anti-tampering controls.

API Security Testing
Test REST, GraphQL, and WebSocket APIs.
Assess authentication and authorization mechanisms including OAuth 2.0, OpenID Connect, and JWT.
Identify Broken Object Level Authorization (BOLA), rate limiting gaps, and injection vulnerabilities.

Infrastructure & Network Security
Conduct security assessments of Linux and macOS servers, firewalls, and internal networks.
Review exposed ports, services, and misconfigurations.
Test SSH, VPN, TLS, DNS, and network segmentation.

Cloud Security




Assess environments in Amazon Web Services, Microsoft Azure, and Google Cloud.
Review IAM permissions, storage exposure, security groups, and container security.

Container & CI/CD Security
Assess Docker, Kubernetes, and CI/CD pipelines.
Evaluate secrets management and software supply chain risks.

Vulnerability Management & Remediation
Prepare detailed reports with severity ratings, proof of concept, impact analysis, and remediation guidance.
Collaborate with developers and DevOps teams to verify and retest fixes.
Prioritize findings based on business impact and exploitability.

Security Automation
Integrate automated scans into Jenkins, GitHub Actions, or other CI/CD systems.
Develop scripts to automate reconnaissance and validation.

Preferred Qualifications
Robust understanding of contemporary authentication and authorization models.
Experience working with development and D

📌 Ethical Hacker Noida (India)
🏢 Piston Technologies Private
📍 India