- Location
- Colombo
- Type
- Full-time
- Department
- Engineering
- Seniority
- Senior
- Closing date
- Today
- Source
- CareersPage
Description
Job Description
- Conduct VAPT and penetration testing across network, web, API and mobile environments
- Perform both automated and manual security testing to identify and validate vulnerabilities
- Analyse vulnerabilities, demonstrate their potential impact and provide practical remediation recommendations
- Prepare clear and professional technical VAPT reports and present findings to clients
- Develop scripts and use security tools to improve the efficiency of penetration-testing activities
- Keep up to date with emerging vulnerabilities, exploits and offensive-security techniques
- Support red-team, security assessment and other offensive-security engagements when required
- Provide technical guidance and mentoring to junior security engineers
Person Specification
- Degree in Computer Science, Cybersecurity, Information Security or a related field is preferred
- 3+ years of hands-on experience in vulnerability assessment, penetration testing (VAPT)
- OSCP or equivalent offensive-security certification is an advantage
- Experience in cloud security, red teaming or source-code review will be an added advantage
- Strong experience in Network, Web Application, API and/or Mobile Application Security Testing
- Strong understanding of OWASP Top 10 and common security vulnerabilities
- Hands-on experience with tools such as Burp Suite, Nmap, Metasploit, Nessus/OpenVAS and Kali Linux
- Good scripting skills in Python, Bash, PowerShell or similar
- Strong analytical, problem-solving and technical reporting skills
- Good communication skills with the ability to interact confidently with clients
- Ability to independently manage VAPT engagements from testing through reporting and client presentation
Skills
PythonLinuxCybersecurityPenetration Testing
