Required Skills
Dynamic App Security Testing (DAST): Advanced
Penetration Testing - Manual: Advanced
Secure Code Review: Advanced
Static App Security Testing (SAST): Advanced
Preferred Skills
Same as above.
Certifications like CEH, OSCP are preferred but not mandatory
Responsibilities
Perform manual and automated web application security assessments to identify security weaknesses and validate application resilience.
Conduct Dynamic Application Security Testing (DAST) and Static Application Security Testing (SAST) using industry-standard security tools and methodologies.
Execute secure code reviews across modern application frameworks and technologies to identify coding vulnerabilities and security gaps.
Analyze, validate, reproduce, and document security vulnerabilities while eliminating false positives.
Assess security findings, determine risk ratings and business impact, and provide practical remediation recommendations.
Prepare detailed security assessment reports, including findings, proof-of-concept evidence, risk assessments, and corrective actions.
Collaborate with development teams to review, validate, and verify remediation of identified vulnerabilities.
Provide guidance on secure application architecture, design principles, and secure software development best practices.
Support vulnerability management activities, including tracking, prioritization, and remediation of security issues.
Partner with developers, architects, and project stakeholders to integrate security throughout the Software Development Lifecycle (SDLC).
Participate in security reviews, threat assessments, and application risk evaluations to strengthen overall application security posture.
Contribute to continuous improvement of application security processes, standards, and testing methodologies.