Application Pen Tester/ OSCP

Penetration Testing (Rapid 7, Kenna, Edgescan)

Infra Pen Testing - Perform penetration testing and vulnerability assessments on networks, servers, endpoints, and other IT infrastructure.

• Identify and exploit security vulnerabilities in internal and external networks.
• Use tools and manual techniques to simulate cyber-attacks and assess the effectiveness of security controls.
• Collaborate with IT and security teams to remediate identified vulnerabilities.
• Provide detailed technical reports with proof-of-concept, risk analysis, and mitigation recommendations.
• Participate in red team/blue team exercises and threat simulations.
• Ensure testing activities comply with company policies, legal regulations, and industry standards.
• Keep up to date with evolving security threats, trends, and testing methodologies.

Application Pen Testing - Conduct manual and automated penetration testing on web, mobile, and cloud-based applications.

• Identify and document application vulnerabilities using industry-standard tools and methodologies (e.g., OWASP Top 10).
• Collaborate with development and QA teams to ensure secure coding and remediation of vulnerabilities.
• Review application architecture and source code for security flaws.
• Simulate real-world attack scenarios to assess application security posture.
• Prepare comprehensive reports detailing findings, risk levels, and mitigation strategies.
• Stay current with emerging threats, vulnerabilities, and security technologies.
• Assist in the development of application security standards and best practices.