- Conduct manual pentest on web application, APIs.

- Conduct Mobile application pentest.

- Tuning DAST rules to reduce false positives

- DAST findings to determine risk priority rating accurately

- Identifying the responsible team for remediations and working to understand the remediation required and plan the work.

- SAST scanning (Node js, Java)

- Tuning SAST rules to reduce false positives

- Triaging SAST security hotspots and working to understand the remediation required and plan the work.

- Threat Modelling / Secure Architecture Review

- Collaborate with architects and other stakeholders to identify the key risks of the features we are building, document the data flows and system changes, record the strategies to be employed to mitigate the identified risks.

- Create a remediation plan and track the implementation.

- Third party software component security Testing

- Review Third Party software as per company policy





- Scan and triage dependency scanner result.

- Work with developers on remediation plans.

- Tune scanner to reduce false positives not create duplicate work

You'll be successful with the following qualifications:

Education

- BE/B.tech in Computer Science or equivalent stream: Preferred

Must Have Skills:

- Experience to handle queries for Google Cloud, AWS, and Azure

- Must have experience with Windows, Linux and MAC devices.

- Desired information about EDR/XDR tool, email gateway, forensic analysis, threat hunting, tenable, Wireshark, TCPDump

- Programming languages: Python, Go or Pearl

- Have worked individually over Hack the box or any other open-source platform as blue team player or bug bounty experience will be an advantage.

- Certifications or Training: CompTIA Security+ or C|EH

📌 App Security Engineer (Hyderabad)
🏢 Castlight Health
📍 Hyderabad