The Role
Conduct penetration testing and secure code reviews across web, mobile, API, and thick-client applications. Identify and exploit OWASP Top 10, SANS CWE Top 25, and business logic vulnerabilities using manual and automated techniques. Communicate project status, support remediation with development and product teams, retest fixes, and follow up on unresolved vulnerabilities. Lead report walkthroughs with stakeholders and apply relevant security standards.
Summary Generated by Built In
Associate Consultant
2 – 4 Years
Roles and Responsibilities:
1. Conduct penetration testing on web, mobile(android +ios), API, and thick-client applications to identify security weaknesses
2. Conduct automated and manual Secure code review
3. Identify and exploit vulnerabilities such as OWASP Top 10, SANS Top 25, and business logic flaws.
3. Client interaction on project updation/status
5. Collaborate with developers, product teams for Remediation support
6. Perform retest post confirmation on the fixes
6. Follow-up with the relevant stakeholders on the remediation of open vulnerabilities
Mandatory Skills required for the role:
Web, API and Mobile Penetration Testing
Proficiency with penetration testing tools such as:
Burp Suite, OWASP ZAP, Postman, Nmap, SQLMap, Metasploit, Echo mirage
Mobile testing tools (e.g., MobSF, Frida) is a plus.
Good understanding on OWASP Top 10, SANS CWE Top 25, NIST standards.
Good written and spoken communication skills
Ability to do report walkthrough with relevant stakeholder
Understanding of programming languages such as PHP, HTML, javascript, etc
Education Requirements:
BE/B.Tech in Computer Science or Information Science Or M.Tech in Computer Science or Information Science
Certifications: CEH, CompTIA, PenTest+, GPEN, OSCP, CREST CRT preferable
Skills Required
- 2–4 years of relevant experience
- Web, API, and mobile penetration testing experience
- Proficiency with Burp Suite, OWASP ZAP, Postman, Nmap, SQLMap, Metasploit, and Echo Mirage
- Understanding of OWASP Top 10, SANS CWE Top 25, and NIST standards
- Good written and spoken communication skills
- Ability to conduct report walkthroughs with stakeholders
- Understanding of PHP, HTML, JavaScript, or similar programming languages
- BE/B.Tech or M.Tech in Computer Science or Information Science
- CEH, CompTIA PenTest+, GPEN, OSCP, or CREST CRT certification
- Experience with mobile testing tools such as MobSF and Frida
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Infosec is a cybersecurity education company that helps IT and security professionals advance their careers and helps employees become safer online at work and home. Its offerings include Infosec Skills, with more than 1,400 hands-on cybersecurity courses and instructor-led certification boot camps, and Infosec IQ, which provides security-awareness training. Its mission is to equip individuals and organizations to outsmart cybercrime.
