Position 1: WebPT P1 - ConsultantExperience - 4+ YearsWork mode - 5 days working- Bangalore, PuneHybrid (3 times in office per week)NP - ImmediatePosition Type - ContractualRoles & responsibilities:o Perform automated testing of running applications and static code (SAST, DAST).o Perform manual application penetration tests on one or more of the following to discover and exploit vulnerabilities: web applications, internal applications, APIs, internal and external networks, and mobile applicationso Experience in one or more of the following is a plus: mobile application testing, Web application pen testing, application architecture, and business logic analysis.o Need to work on application tools to perform security tests: AppScan, NetsSparker, Acunetix, Checkmarx, Veracode, BurpSuite, OWASP ZAP, and Kali Linux.o Able to explain IDOR, Second Order SQL Injection, CSRF Vulnerability, Root cause, RemediationMandatory technical & functional skillso Minimum three (3) years of recent experience working with application tools to perform security tests: AppScan, NetsSparker, Acunetix, Checkmarx, Veracode, BurpSuite, OWASP ZAP, Kali Linux, or equivalent.o Minimum three (3) years of performing manual penetration testing and code review against web apps, mobile apps, and APIso Minimum three (3) years of working with technical and non-technical audiences in reporting results and lead remediation conversations.o Preferred one year of experience in the development of web applications and/or APIs.o should be able to identify and work with new tools/technologies to plug and play on client projects as needed to solve the problem at hand.o One or more major ethical hacking certifications not required but preferred: GWAPT, CREST, OSCP, OSWE, OSWA