Mandatory Certification

OSCP.

Roles And Responsibilities
Conduct penetration testing on web, mobile (android + ios), API, and thick-client applications to identify security weaknesses.
Conduct automated and manual Secure code review.
Identify and exploit vulnerabilities such as OWASP Top 10, SANS Top 25, and business logic flaws.
Client interaction on project updation/status.
Collaborate with developers, product teams for Remediation support.
Perform retest post confirmation on the fixes.
Follow-up with the relevant stakeholders on the remediation of open vulnerabilities.

Mandatory Skills Required For The Role
Web, API and Mobile Penetration Testing.
Proficiency With Penetration Testing Tools Such As: Burp Suite, OWASP ZAP, Postman, Nmap, SQLMap, Metasploit,



Echo mirage.
Mobile testing tools (e.g., MobSF, Frida) is a plus.
Positive understanding on OWASP Top 10, SANS CWE Top 25, NIST standards.
Valuable written and spoken communication skills.
Ability to do report walkthrough with relevant stakeholder.
Understanding of programming languages such as PHP, HTML, javascript, etc.

Education Requirements
BE/B.Tech in Computer Science or Information Science Or M.Tech in Computer Science or Information CEH, CompTIA, PenTest+, GPEN, OSCP, CREST CRT preferable.

(ref:hirist.tech)

📌 Sisa Information Security Senior Consultant Penetration Testing Bengaluru (India)
🏢 SISA
📍 India