Experience:
2–3 Years What You’ll Do Run VAPT on web, mobile (Android/iOS), API and thick client apps Pentest AI/LLM applications for prompt injection, data leakage and insecure integrations Use AI tools to speed up recon, testing, exploit development and reporting Test auth, access control, session handling and business logic Find and chain vulnerabilities beyond what scanners catch Write clear reports and communicate findings to clients What You’ll Need Hands-on experience with Burp Suite, Postman, Nmap, MobSF, Frida, JADX and APKTool Solid grasp of the OWASP Web, API, Mobile and LLM Top 10 Comfort using AI in your day-to-day security workflow Robust offensive-security mindset Good to Have: Python/Bash scripting, OSCP/OSWE/CEH/eWPT, bug bounty or CTF experience CERTIFICATE MUST TO HAVE : OSCP and CEH