Job Title: Security Lead
Job Location: Sanpada, Navi Mumbai
Experience: 6+yrs
Requirements
Network & Infrastructure Security Testing
- Perform network traffic analysis to assess security risks in TCP/IP, routing, and switching.
- Conduct port and service enumeration to identify attack surfaces.
- Execute infrastructure penetration testing on identified services
Web & Application Penetration Testing
- Identify and exploit OWASP Top 10 vulnerabilities in web applications.
- Assess SANS Top 25 vulnerabilities in application security.
- Perform business logic testing to uncover logical flaws in applications.
- Conduct penetration testing for Web, Mobile, API, and Thick Client applications.
Cloud & Active Directory Security Testing
- Perform Active Directory penetration testing to uncover misconfiguration and privilege escalation paths.
- Conduct cloud security penetration testing across AWS, Azure, and GCP.
- Review CIS Benchmark & NIST-based configurations for security gaps.
Exploitation & Secure Code Review
- Perform manual and automated exploitation of vulnerabilities.
- Conduct source code reviews for Java, .NET, Python, ReactJS, Kotlin, and Ionic.
Threat Modeling & Reporting
- Develop Threat Models to assess security risks proactively.
- Deliver detailed security reports with exploit demonstrations and mitigation strategies.
Please note: Designation will be finalized based on interview evaluation
