21 Sep
|
TAC Security
|
India
21 Sep
TAC Security
India
Role Purpose
TAC Security is looking for a highly skilled Security Engineer – OSCP Certified with strong hands-on expertise in penetration testing, vulnerability assessment, application security, network security, and offensive security .
The Security Engineer will be responsible for identifying, validating, and demonstrating security vulnerabilities across web applications, APIs, mobile applications, networks, cloud environments, and infrastructure. The role requires a robust offensive-security mindset, practical exploitation skills, and the ability to provide actionable remediation guidance to clients and internal teams.
Key Responsibilities
1. Vulnerability Assessment & Penetration Testing
- Perform end-to-end Vulnerability Assessment and Penetration Testing (VAPT) across applications and infrastructure.
- Conduct manual penetration testing rather than relying solely on automated scanning tools.
- Identify, validate, exploit, and document security vulnerabilities.
- Perform network and infrastructure penetration testing across internal and external environments.
- Conduct security testing of web applications, APIs, mobile applications, and cloud-based environments.
- Perform vulnerability verification and retesting after remediation.
- Evaluate vulnerabilities based on technical severity, exploitability, and potential business impact.
2. Web Application & API Security
- Perform advanced web application penetration testing aligned with OWASP Top 10 and relevant testing methodologies.
- Test for vulnerabilities including SQL Injection, XSS, SSRF, IDOR, authentication and authorization weaknesses, insecure deserialization, file-upload vulnerabilities, business-logic flaws, and security misconfigurations.
- Conduct API security assessments covering REST and other API architectures.
- Identify complex authorization, authentication, session-management, and business-logic vulnerabilities.
3. Network & Infrastructure Security
- Conduct external and internal network pen
📌 Security Engineer (India)
🏢 TAC Security
📍 India