Roles and Responsibilities:
Conduct penetration testing on web, mobile(android +ios), API, and thick-client applications to identify security weaknesses
Conduct automated and manual Secure code review
Identify and exploit vulnerabilities such as OWASP Top 10, SANS Top 25, and business logic flaws .
Client interaction on project updation/status
Collaborate with developers, product teams for Remediation support
Perform retest post confirmation on the fixes
Follow-up with the relevant stakeholders on the remediation of open vulnerabilities

Mandatory Skills required for the role:

Web, API and Mobile Penetration Testing

Proficiency with penetration testing tools such as:

Burp Suite, OWASP ZAP, Postman, Nmap, SQLMap, Metasploit, Echo mirage

Mobile testing tools (e.g., MobSF, Frida ) is a plus.

Valuable understanding on OWASP Top 10, SANS CWE Top 25,



NIST standards .

Valuable written and spoken communication skills

Ability to do report walkthrough with relevant stakeholder

Understanding of programming languages such as PHP, HTML, javascript, etc

Education Requirements:

BE/B.Tech in Computer Science or Information Science Or M.Tech in Computer Science or Information Science

Certifications: CEH, CompTIA, PenTest+, GPEN, OSCP, CREST CRT preferable

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

📌 Application Security Professional Bengaluru (India)
🏢 SISA Information Security
📍 India