Conduct manual pentest on web application, APIs.
Conduct Mobile application pentest.
Tuning DAST rules to reduce false positives
DAST findings to determine risk priority rating accurately
Identifying the responsible team for remediations and working to understand the remediation required and plan the work.
SAST scanning (Node js, Java)
Tuning SAST rules to reduce false positives
Triaging SAST security hotspots and working to understand the remediation required and plan the work.
Threat Modelling / Secure Architecture Review
Collaborate with architects and other stakeholders to identify the key risks of the features we are building, document the data flows and system changes, record the strategies to be employed to mitigate the identified risks.
Create a remediation plan and track the implementation.
Third party software component security Testing
Review Third Party software as per company policy
Scan and triage dependency scanner result.




Work with developers on remediation plans.
Tune scanner to reduce false positives not create duplicate work

You'll be successful with the following qualifications:

Education
BE/B.tech in Computer Science or equivalent stream: Preferred

Must Have Skills:
Experience to handle queries for Google Cloud, AWS, and Azure
Must have experience with Windows, Linux and MAC devices.
Desired information about EDR/XDR tool, email gateway, forensic analysis, threat hunting, tenable, Wireshark, TCPDump
Programming languages: Python, Go or Pearl
Have worked individually over Hack the box or any other open-source platform as blue team player or bug bounty experience will be an advantage.
Certifications or Training: CompTIA Security+ or C|EH

📌 App Security Engineer Hyderabad
🏢 Castlight Health
📍 Hyderabad