VAPT Pentester / Web Application Security

Job Description

Netsach — Web Application Security Engineer
Company: Netsach
Role: Web Application Security / Security Analyst/Engineer
Location: Bangalore
Experience: 3–5 years
Employment: Full-time
Domain: Application Security / Web Security / API Security

Mandatory skills

Web Application Security
Security Code Review
API Security
Underlying Infrastructure Security
Integration Security
Database Security
Secure Configuration Review

Security expertise

OWASP Top 10
CVSS
XSS prevention/testing
SQL Injection
WAF security/testing
TLS
Secure SDLC
Microservices and monolithic architectures
DevSecOps / pipeline security
DAST/SAST

Tools

Burp Suite
Postman
Tenable Nessus
Checkmarx SAST
GitHub

Key responsibilities

Embed security controls and patterns throughout the development lifecycle
Promote a Shift Left security approach
Conduct application security assessments and gap analysis
Perform manual source-code reviews
Review APIs, databases, web servers and integrations
Assess infrastructure and transport-layer security
Identify vulnerabilities and recommend remediation
Work with Product Owners, Architects, Developers, Testers and other stakeholders
Interpret security requirements and incorporate them into designs/agile processes
Support secure architecture and reduce technical debt

Advanced expectations

Ability to conduct deep web application testing
Understanding of WAF bypass scenarios
Ability to assess source/compiled code
Security automation/scripting
Container and microservices security
DevOps/CI environments
Hardening standards and configuration assessment
Risk assessment and security-control implementation

Education/certifications

Bachelor’s degree in a computer-related field
Certifications such as OSCP, CEH, CISM/CISA
Cloud security: CCSK/CCSP
Azure Security
Network/security certifications such as CCNA/CCNP/CCIE or Kubernetes Security Specialist

Soft skills: Stakeholder management, persuasion/influencing, communication, analytical thinking, independent work, negotiation, leadership and deadline management.

Application: emily@netsach.co.in
Contact: +91 8050023824
Website: netsachglobal.com