Security Tester

Role Overview

We are seeking experienced Security Testers with advanced expertise in manual penetration testing, Dynamic Application Security Testing (DAST), Static Application Security Testing (SAST), and secure code reviews. The ideal candidates will identify and validate application security vulnerabilities, assess risk and business impact, recommend practical remediation strategies, and collaborate with development teams to strengthen application security throughout the Software Development Life Cycle (SDLC).

Required Skills

• Advanced expertise in manual application penetration testing.
• Advanced experience with Dynamic Application Security Testing (DAST).
• Advanced experience with Static Application Security Testing (SAST).
• Advanced secure code review skills.
• Strong understanding of web application vulnerabilities, security weaknesses, and secure coding practices.
• Ability to validate vulnerabilities, reproduce findings, and eliminate false positives.
• Experience assessing security risks, determining business impact, and recommending remediation measures.
• Strong analytical, documentation, and communication skills.

Preferred Skills

• Certified Ethical Hacker (CEH) certification.
• Offensive Security Certified Professional (OSCP) certification.
• Relevant experience with industry standard application security testing tools and methodologies.

Key Responsibilities

• Perform manual and automated web application security assessments to identify security weaknesses and validate application resilience.
• Conduct DAST and SAST using industry standard security tools and methodologies.
• Perform secure code reviews across modern application frameworks to identify coding vulnerabilities and security gaps.
• Analyze, validate, reproduce, and document security vulnerabilities while eliminating false positives.
• Assess security findings, determine risk ratings and business impact, and provide actionable remediation recommendations.
• Prepare detailed security assessment reports with findings, proof of concept evidence, risk assessments, and corrective actions.
• Collaborate with development teams to review and validate remediation of identified vulnerabilities.
• Provide guidance on secure application architecture, design principles, and secure software development best practices.
• Support vulnerability management activities, including tracking, prioritization, and remediation of security issues.
• Work with developers, architects, and project stakeholders to integrate security throughout the SDLC.
• Participate in security reviews, threat assessments, and application risk evaluations to strengthen application security.
• Continuously improve application security processes, standards, and testing methodologies.

Expected Deliverables

• Comprehensive security testing reports documenting identified vulnerabilities, severity ratings, and business impact.
• Proof of concept evidence and reproducible steps for validated findings.
• Practical remediation recommendations and corrective action plans.
• Vulnerability validation and remediation verification results.

Education Requirement

Bachelor’s degree in Computer Science, Information Technology, Engineering, Business Administration, or a related field is preferred.