Senior Associate, Offensive Security
On-siteBengaluru, Karnataka, India
Job Summary
Supervise and lead security assessments, including static and dynamic application security testing, while conducting manual penetration testing on web applications, network devices, and other systems. Collaborate with clients across diverse technology stacks and cloud platforms to develop, enhance, and interpret security standards. Articulate findings to senior management and clients, then assist with remediation recommendations and identify improvement opportunities for assigned portfolios. Mentor team members and foster open communication to deliver successful outcomes. Stay current with the latest security trends and best practices to empower development and security teams.
Required Qualifications
- BS in Computer Science, Engineering, or related field or equivalent work experience
- Advanced expertise in web security, with comprehensive knowledge of vulnerabilities and effective exploitation techniques
- 5+ years of experience in code review, application security testing, or web application development
- Excellent written and verbal communication skills
- Proficient programming skills (e.g. Java, Python, Ruby, JavaScript)
- Experience with cloud platforms, such as AWS, and knowledge of cloud security best practices
- Familiarity with development technologies like Docker, CDK, Terraform, Java, Python, React, GraphQL, JSON, REST, etc.
- Technical background in application development, networking/system administration, security testing, or related fields
- Experience with both static application security testing (SAST) and dynamic application security testing (DAST) using various tools and techniques
- Must possess a high degree of integrity and confidentiality, as well as the ability to adhere to both company policies and best practices
Desired Qualifications
- one or more relevant certifications such as Offensive Security Web Assessor (OSWA), Offensive Security Web Expert (OSWE), Offensive Security Certified Professional (OSCP), Burp Suite Certified Practitioner, or AWS Certified Security Specialist
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.