About the role
- The Senior Specialist in this position will lead end-to-end VAPT for web applications, APIs, Android and iOS using manual and automated techniques
- You will also define assessment scope, test strategy, attack scenarios and rules of engagement
- Apply OWASP, CWE, CVSS and relevant NIST guidance throughout assessments
- Validating exploitability, business impact and root cause; eliminate false positives
- You will also quality-assure findings for severity, evidence, reproducibility, remediation and reporting accuracy
- And manage UVM intake and triage – validation, deduplication, ownership, prioritisation and SLA tracking
- Also, assess patch and remediation options – applicability, dependencies, implementation risk and compensating controls
- Provide remediation guidance covering secure code, configuration, dependency upgrades, patching and architectural controls
- Along with performing retesting, residual-risk assessment, verified closure and exception/risk-acceptance support
- Also, maintain evidence, audit traceability, metrics, dashboards and management reporting
- Support threat modelling, security architecture, secure-design and pre-production reviews
- Review and correlate SAST, DAST, SCA and cloud/container security findings
- You will develop reusable testing methodologies, checklists, scripts and automation
- And mentor engineers; lead technical reviews, stakeholder discussions and complex security escalations