Application Security Lead

ob Description:
We are looking for a skilled Penetration Tester with 5-7 years of experience in application security. The ideal candidate will have hands-on experience in conducting security assessments and penetration testing for web applications, APIs, and mobile applications. The role also involves code reviews, participation in risk assessments, and collaborating with development teams to ensure secure software development practices.

Key Responsibilities:

• Conduct penetration testing for web applications, APIs, and mobile applications.
• Perform source code reviews to identify vulnerabilities.
• Collaborate with development teams to implement security controls and best practices.
• Assist in the development and maintenance of security policies, procedures, and guidelines.
• Perform threat modeling and risk assessments on applications.
• Stay updated on the latest security trends, vulnerabilities, and regulatory requirements.
• Provide training and awareness programs for development teams on secure coding practices.

Required Skills and Qualifications:

• 5+ years of experience in application security, penetration testing, or a related field.

• Proficiency in web, API, and mobile penetration testing (android and IOS)

• Strong understanding of OWASP Top 10 vulnerabilities.

• Experience with security testing tools such as Burp Suite, static and dynamic analysis tools.

• Familiarity with programming languages such as Java, C#, Python, or JavaScript.

• Solid understanding of encryption techniques and secure coding practices.

• Strong analytical and problem-solving skills.

  • Excellent communication, teamwork, and collaboration abilities.

Preferred Qualifications:

• Certifications such as OSCP, CEH, or equivalent.

• Conduct penetration testing for web applications, APIs, and mobile applications.

• Perform source code reviews to identify vulnerabilities.

• Collaborate with development teams to implement security controls and best practices.

• Assist in the development and maintenance of security policies, procedures, and guidelines.

• Perform threat modeling and risk assessments on applications.

• Stay updated on the latest security trends, vulnerabilities, and regulatory requirements.

• Provide training and awareness programs for development teams on secure coding practices.