Ability to perform Web application Vulnerability assessment & Pen test using automated tool / manual testing.
Knowledge in threat modelling DREAD / STRIDE
Staying updated with emerging threats and provides remediation steps for mitigating such attacks. Supporting clients in giving step-by-step guide for replicating potential attack scenarios and security patches if required.
Conduct fully manual web application testing with in-depth knowledge of OWASP top 10 vulnerabilities, SANS Top 25; etc.
Manage and maintain/update/upgrade centralized vulnerability scanners for scanning external/public facing infrastructure.
Hands-on in Nessus, Acunetix / IBM Apps scan, Kali tools
Certified in CEH/CPT/CEPT/CompTIA Pentest+ or equivalent