Penetration Tester|4 To 6 Yrs|Bangalore & Pune

Job Description

1 Penetration Testing Web Application Reviewing application code against the secure coding baseline and practices Review code developed in JAVA dot Net and other leading modern programming languages and technologies Performing static and dynamic web application security assessments using hands on techniques for identifying SQL injections XSS CSRF authentication authorization OWASP top 10 Sans Top 25 issues Review of security technologies for secure software development such as cryptography authentication Manual Vulnerability Testing Verification of Identified Vulnerabilities Identify exclude false positives Recommend application team on how to fix the identified issues Performing Manual penetration testing 2 Penetration Testing Network Component Discovery Foot printing Reconnaissance System Fingerprinting Services Enumeration Services Probing IP Probing IP Sweeps Ping Sweeps Manual Vulnerability Testing Verification of Identified Vulnerabilities Manual penetration testing Identify exclude false positives 3 Penetration Testing Mobile Discovery Foot printing Reconnaissance System Fingerprinting Services Enumeration Services Probing IP Probing IP Sweeps Ping Sweeps Decompiling Reverse engineering executable Scanning etc Manual Vulnerability Testing Verification of Identified Vulnerabilities Manual penetration testing Identify exclude false positives Technical Experience Hands on experience on web application vulnerability scanners such as Fortify Web Inspect Acunetix Burp Suite Pro etc Knowledge of testing of Android iOS mobile applications using static and dynamic testing tools Santoku Burp Mobile Assistant apktool etc Performing jailbreaking rooting of android iOS devices for the assessment Running SAST DAST Scans Analyzing tool results perform SAST DAST Manual code review remediation support review open source components Hands on experience on penetration tools such kali linux Wireshark Nmap John the Ripper Metasploit etc Perform simulated cyberattacks on a company s computer systems and networks Qualification Graduate Post graduate in Computers 5 Years of Experience in Penetration security testing Desired certifications Offensive Security Certified Professional OSCP eWAPT Certified Web Application Penetration Tester ECSA GIAC Certified Penetration Tester

Primary Skills

SAST,DAST,Penetration Testing Network Component Discovery Foot printing Reconnaissance System Fingerprinting Services Enumeration Services Probing IP Probing IP Sweeps Ping Sweeps Manual Vulnerability

Secondary Skills

Penetration security testing Desired certifications Offensive Security Certified Professional OSCP eWAPT Certified Web Application Penetration Tester ECSA GIAC Certified Penetration Tester