Web Application Security Consultant (WebPT P1 )

Position 1: WebPT P1 - Consultant

Notice Period - Immediate Joiner/Serving

Roles & responsibilities:

o Perform automated testing of running applications and static code (SAST, DAST).

o Perform manual application penetration tests on one or more of the following to discover and exploit vulnerabilities: web applications, internal applications, APIs, internal and external networks, and mobile applications

o Experience in one or more of the following is a plus: mobile application testing, Web application pen testing, application architecture, and business logic analysis.

o Need to work on application tools to perform security tests: AppScan, NetsSparker, Acunetix, Checkmarx, Veracode, BurpSuite, OWASP ZAP, and Kali Linux.

o Able to explain IDOR, Second Order SQL Injection, CSRF Vulnerability, Root cause, Remediation

<...