Role Objective:
Looking for
insightful and result-driven Information Security professional with areas of
expertise as Web application & network vulnerability penetration testing
and having hands-on experience on vulnerability exploitation tools.
Roles and Responsibilities:
- Responsible for
Conducting high-end web Application and Network Penetration Testing which
combines automated
application security testing with in-depth manual business logic testing and
developing
remediation plans and security procedures.
-- Proficient in
discovering logical vulnerabilities in applications or networks which are
missed by
automated tools.
Delivered reports with Zero-false positive through advanced heuristics, safe
exploitation, and
manual validation.
-- > Worked on
Android & iOS applications penetration testing, Web Services Security
Assessment and
thick client
application security testing.
-- Onsite
Network/Application penetration testing project Expert. Performed
BlackBox/GreyBox
Network and
application penetration testing onsite in Macau.
-- Red Team
assessment on the client s external and internal network infrastructure and
which
included phishing,
social engineering, vulnerability assessment of external web applications,
internal
network devices
penetration testing, wireless device testing and other network devices to find
a
vulnerability and
gain access to the internal network, escalate privilege to domain admin and
exfiltrate
critical organization
information
Skills Required:
4 years of relevant experience
in :
-Web Application
Security
- Network Security
- Mobile application
security
- Cloud Security
(AWS)
- Web Socket security
- Web Service
security
- Reverse Engineering
- Red Teaming