Job Description
- Perform web applications, thick client applications, mobile applications, API and network penetration testing.
- Perform Black-box, and Grey-box Testing, as well as build proof-of-concepts to demonstrate the severity of findings.
- Hands-on experience in performing Automatic and manual pen testing on application, network, systems and large enterprise infrastructure Understanding of web-based application (OWASP Top 10) vulnerabilities.
- Working knowledge of industry standard risk, governance and security standard methodologies
- Hands-on experience on various scanning tools like Kali, Nessus, NMAP, Metasploit, Burp Suite, etc.
- Conduct penetration testing of IT Infrastructure (OS, Web & DB), Network and Security Devices using various vulnerability assessment tools
- Map out a network, discover ports and services running on the different exposed network and security devices
- Analyse scan reports and suggest remediation / mitigation plan
- Audit configuration of Network and Security devices Should have experience on IT Infra .