Experience : 5-7 years in a Security Engineer, Penetration Tester, or similar role focused on both application and infrastructure security.
Certifications : Relevant certifications in ethical hacking, penetration testing, or security engineering are highly desirable.
Technical Expertise : Proficient in identifying and exploiting vulnerabilities across web applications and infrastructure, including common attack vectors such as SQL Injection, Cross-Site Scripting (XSS), insecure configurations, and network misconfigurations.
Programming and Scripting : Proficiency in at least one programming or scripting language (e.g , Python, JavaScript, Bash, or PHP).
Tools : Experience with security tools for both applications and infrastructure, including Burp Suite, Metasploit, Nmap, AWS Security Hub, and similar tools for cloud and network security.
Cloud and Infrastructure Knowledge : Familiarity with security best practices for AWS and container security (e.g, Docker, Kubernetes).
Self-Starter : Highly self-motivated, thrives on independent research, and continuously seeks out new challenges.
Team Impact : Effective communication and collaboration skills, with a strong ability to advocate for security and influence cross-functional teams.
Preferred Requirements :
Regular engagement in bug bounty programs or responsible disclosure programs in personal time, with proven success in reporting vulnerabilities.
Experience in securing infrastructure environments, cloud networks, and virtualized systems.
A track record of independent security projects and active participation in security communities.
Passion for fostering a proactive security culture across both application and infrastructure teams.
Regular engagement in bug bounty programs or responsible disclosure programs in personal time, with proven success in reporting vulnerabilities.
Experience in securing infrastructure environments, cloud networks, and virtualized systems.
A track record of independent security projects and active participation in security communities.
Passion for fostering a proactive security culture across both application and infrastructure teams