Application Security
Description
About the role
Assess security effectiveness through security testing and provide assurance on the organization's security posture.
Key responsibilities
Plan and execute vulnerability assessments and penetration tests against infrastructure, applications, cloud environments, and networks.
Conduct web application, network, and API security testing.
Identify, validate, and assess security vulnerabilities and exploitation paths.
Perform configuration and security posture assessments of servers, operating systems, databases, and network devices.
Document findings, risk ratings, and remediation recommendations in technical assessment reports.
Support secure application deployment activities and validate security controls before production release.
Work closely with blue teams and system owners to validate remediation effectiveness.
Continuously research emerging threats, attack techniques, and offensive security tools.
About you
OWASP Top 10 and secure coding principles.
SAST (Static Application Security Testing).
DAST (Dynamic Application Security Testing).
SCA (Software Composition Analysis).
Burp Suite for web application security testing.
Secret scanning and container security scanning.
Application and API security assessment.
SDLC and DevSecOps security integration.
Vulnerability assessment, triage, and remediation tracking.