Associate Consultant

We are looking for a skilled Application Security Tester with expertise in penetration testing and secure code review . The ideal candidate will be responsible for assessing applications, networks, and source code to identify vulnerabilities, simulate security breaches, and recommend effective remediation strategies.

Key Responsibilities :

Perform penetration testing on web, mobile, network, and infrastructure environments to uncover security weaknesses.

Understand client requirements, plan security tests, and create penetration methods, scripts, and scenarios.

Conduct source code reviews to identify security flaws, coding errors, and compliance issues.

Perform static analysis and provide clear remediation guidance aligned with industry best practices.

Validate fixes to ensure vulnerabilities are resolved without introducing new risks.

Analyze third-party libraries and dependencies for vulnerabilities and licensing risks and recommend secure upgrades.

Simulate real-world security breaches to assess system resilience and business impact.

Support integration of security tools into CI / CD pipelines for continuous monitoring.

Assist in risk assessments, threat modeling, and audit compliance initiatives.

Document findings, prepare reports, and present results to technical and management stakeholders.

Provide advisory on mitigating risks and strengthening application and infrastructure security.

Stay up to date with the latest emerging threats, vulnerabilities, and security standards .

Required Skills & Qualifications :

Strong knowledge of penetration testing methodologies and common attack techniques.

Experience with source code review tools (e.g., SonarQube, Checkmarx, Fortify) and manual secure code review practices.

Familiarity with scripting languages (Python, Bash, PowerShell, etc.) and secure coding principles.

Understanding of network protocols, web technologies, APIs, and operating systems .

Hands-on experience with security testing tools such as Burp Suite, OWASP ZAP, Metasploit, Nessus, etc.

Knowledge of CI / CD pipeline security integration and DevSecOps practices.

Strong problem-solving skills with the ability to clearly communicate findings and risks.

Relevant certifications - CEH, OSCP / SANS 25, LPT, CEPT or equivalent.

Note : Only 30 days to Immediate Joiners preferred.