Penetration Tester (Red Team)
Summary
Red-team penetration tester performing VAPT across customer mobile apps, web apps, and internal/external IT infrastructure. Day to day they run pentests, write detailed technical and executive reports, manage vulnerabilities surfaced by SAST/DAST/IAST tools, and act as a cybersecurity SME promoting secure coding practices.
Perform Vulnerability Assessments and Penetration Testing (VAPT) across customer environments, including mobile applications, web applications, and IT infrastructure (internal and external).
Execute penetration testing activities and identify potential security vulnerabilities across applications, systems, and infrastructure.
Prepare comprehensive penetration testing reports, including executive summaries and detailed technical findings, along with recommended remediation actions.
Manage and monitor vulnerability management activities across the company's products and services.
Identify, assess, manage, and review vulnerabilities detected through Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Interactive Application Security Testing (IAST) tools.
Lead security awareness initiatives and promote secure coding practices among developers and IT engineers.
Serve as a Subject Matter Expert (SME) in cybersecurity by providing security insights, recommendations, and technical feedback to developers and engineers.
Collaborate with cross-functional teams to ensure security best practices are implemented throughout the development lifecycle.