Hands-on experience in Manual Penetration Testing (VA/PT) [or] Dynamic Application Security Testing (DAST) of Applications & APIs is a MUST.

Detailed understanding of OWASP Top10 & SANS Top25 vulnerabilities, CVSS Risk-Rating metrics, CVE & NVD is a MUST.

MUST have expertise in Tools like AppScan, Web Inspect, Burp Suite, OWASP ZAP, Fiddler, Kali Linux, SoapUI, Nmap, Wireshark, Fortify, Audit Workbench, Software Security Center, WhiteSource/Mend, Postman, MobSF, OllyDbg,

MUST be CEH certified.

The candidate MUST demonstrate good analytical abilities, attention to detail, and strong verbal & written communication skills.

MUST be interested in Researching, creating Proof of Concepts, giving Trainings, and creating detailed Documentation.