Associate Software Engineer - Security Testing

We are seeking a skilled Security Tester to join our team and help enhance the security posture of our digital assets. The ideal candidate will be responsible for conducting thorough vulnerability assessments and penetration tests across various platforms, including web applications, mobile apps, APIs, and network infrastructure. This role requires a hands-on approach to both manual and automated security testing, ensuring that potential risks are identified, documented, and communicated effectively to support remediation efforts.

Key Responsibilities

- Conduct comprehensive vulnerability assessments and penetration testing on web applications, mobile applications, APIs, and network infrastructure to identify security weaknesses.

- Perform both manual and automated security testing using industry-standard tools such as Burp Suite, OWASP ZAP, Nessus, Nmap, and Metasploit.

- Develop and execute security test cases aligned with recognized frameworks and standards, including OWASP Top 10, OWASP ASVS, API Security Top 10, and CWE/SANS Top 25.

- Identify, document, and report vulnerabilities with detailed severity ratings based on the Common Vulnerability Scoring System (CVSS). Provide proof-of-concept evidence and actionable remediation guidance.

- Integrate dynamic application security testing (DAST) and interactive application security testing (IAST) within continuous integration and continuous deployment (CI/CD) pipelines to ensure ongoing security validation.

- Identify, validate, and reproduce a wide range of vulnerabilities such as Cross-Site Scripting (XSS), SQL Injection, Cross-Site Request Forgery (CSRF), authentication weaknesses, authorization flaws, Server-Side Request Forgery (SSRF), security misconfigurations, and sensitive data exposure.

Required Qualifications

- Proven experience in conducting vulnerability assessments and penetration testing across multiple platforms including web, mobile, API, and network environments.

- Proficiency with security testing tools such as Burp Suite, OWASP ZAP, Nessus, Nmap, and Metasploit.

- Strong understanding of security frameworks and standards including OWASP Top 10, OWASP ASVS, API Security Top 10, and CWE/SANS Top 25.

- Ability to accurately assess and document vulnerabilities with CVSS severity ratings and provide clear remediation recommendations.

- Experience integrating security testing practices within CI/CD pipelines using DAST and IAST methodologies.

- In-depth knowledge of common web and application vulnerabilities including XSS, SQL Injection, CSRF, authentication and authorization issues, SSRF, and misconfigurations.

Preferred Qualifications and Benefits

While not explicitly stated, candidates with certifications such as OSCP, CEH, or CISSP, and experience working in agile development environments will be highly regarded. This role offers the opportunity to work with cutting-edge security tools and contribute directly to the protection of critical digital assets within a dynamic and collaborative team environment.

If you are passionate about application security and eager to apply your expertise to safeguard complex systems, we encourage you to apply.