VAPT Engineer

Pre-Requisition:

• Degree in Computer Engineering, Computer Science, Information Systems, Digital Forensics or equivalent qualifications
• Minimum 2 years’ of relevant work experience in IT security implementation and operations
• Strong background in executing comprehensive penetration tests and vulnerability assessments across domains (Web, Mobile, API, Network/Infrastructure), as well as source code reviews.
• Good interpersonal skills and a team player
• Strong presentation and writing skills

Job Description:

• Perform penetration tests (Web, Mobile, API, Network/Infrastructure). Assessments involve manual testing and analysis as well as the use of automated application vulnerability scanning/testing and/or code review tools. i.e. Nessus, Burp Suite Professional, HP Fortify
• Perform source code review for applications using both automated tools (i.e. HP Fortify, Checkmarx) and manual testing.
• Write and present comprehensive security assessment report/findings and support customer in assessing mitigations and remediation options.
• Provide support for potential clients in project scoping and effort estimation, including identifying attack surfaces within network and application architecture.
• Work on improvements for provided security services, including the continuous enhancement of existing methodology material and supporting assets.

Technical Skill sets:

• Possessed OSCP or attained CREST CRT
• Several years of experience developing web and/or mobile applications, i.e. financial, e-commerce, or internet-facing business applications.
• Knowledge of the HTTP protocol and how it works
• Understanding of cryptography principles