Penetration Tester

Required skillsExperienced in Web application penetration testingExperienced Mobile application penetration testingCoding skills to test/simulate infiltrationExcellent knowledge of computer security and systemsUnderstanding of how vulnerabilities and security breaches can disrupt businessGood in troubleshooting and problem-solving skills5+ or more years conducting penetration testing using freeware and commercial tools like Burp Suite, security reviews, threat modeling, tracking findings.Hands on exp in the area of DAST, SAST, Code review, DevSecOps etc.Conversant in at least one programming language such as Python or JavaFamiliar with typical web application vulnerabilities, especially OWASP top 10, understand the risk and principle of the vulnerabilities.Hands on skills to identify common vulnerabilities in real application, not just demo or lab.Understand how HTTP works.Basic ability to research, study and know how to solve simple technical issues

Good to have skillsAbility to identify and exploit web vulnerabilities (XSS, CSRF, SQLi, SSRF, arbitrary file upload, etc.)Ability to identify and exploit mobile vulnerabilities (API issues, insecure storage, memory corruption, deep links, etc.)Create new testing methods to identify anomalies, vulnerabilitiesCommunication skills to collaborate with different teams, document execution report and share findings