Application Security and Vulnerability Management Experts

SAST, DAST, Infra VM, Qualys, Nessus,Tenable, Red teaming, Purple teaming, vulnerability Management, Penetration testing
Application Security
Perform secure code reviews (manual & automated) for applications written in languages like Java, Python, JavaScript, etc.
Integrate security into CI/CD pipelines (Dev Sec Ops practices).
Conduct risk assessments, threat modeling, and security design reviews.
Identify, analyze, and report vulnerabilities such as OWASP Top 10 issues.
Work closely with development teams to remediate security flaws.
Penetration Testing
Conduct black-box, gray-box, and white-box penetration testing on:
Web applications
Mobile applications (Android/iOS)
APIs and microservices
Perform network and infrastructure security assessments when required.
Use automated tools and manual techniques to discover vulnerabilities.
Develop detailed penetration testing reports with risk ratings and remediation recommendations.

Security Tools & Technologies:

Utilize tools such as:
Burp Suite, OWASP ZAP
Nmap, Metasploit
Nessus, Qualys
SAST/DAST tools (e.g., Checkmarx, Veracode, Fortify)
Create custom scripts for automation and testing (Python, Bash, etc.).

Education: Master of Computer Science,MCA,Intergrated course BCA+MCA,Post Graduate In Computer Science Application (PGDCSA),Bachelor Of Comp. Applications,Bachelor of Comp. Sc. & Engg.,Bachelor of Engineering,BCA

Preferred skills: Application Security,Application Security->Application Risk Profiling,Application Security->Burpsuite,Application Security->Devsecops,Application Security->Ethical Hacking(CEH),Application Security->Nessus,Application Security->SSL(Secure Sockets Layer),Application Security->Threat Modeling,Application Security->Vulnerability Assessment/Penetration Testing,Application Security->Vulnerability Management,Application Security->Web Security,Application Security->Webservices Security,Application Security->Wireshark,Security testing->Vulnerability testing,Technology->Application Security->Vulnerability Management->Qualys,Technology->Application Security->Vulnerability Management->Rapid 7 Nexpose,Vulnerability Management