Security Test Analyst (CREST/OSCP Cert required)

The Security Test Analyst is responsible to conduct and follow-up Web VAPT (Vulnerability Assessment Penetration Testing), DAST (Dynamic Application Security Testing), SAST (Static Application Security Testing) and Security Test Tools implementation.

Key Roles & Responsibilities

Understand and analyze testing requirements to prepare test plan, and test design

Prepare and ensure readiness of and test environment to carry out the test execution

Perform the security tests (DAST / SAST) or code review

Analyze test results and work with respective teams to resolve issues

Present the test results to project teams or customers , and be able to articulate the security issues to customers

Prepare test report for submission

Provide verifications for the fixed issues

Assess the justifications for risk assessment

The Ideal Candidate Should Have/ Be

3-5 years of development experience in .NET/Java

Minimum 3 years experience on performing DAST / SAST.

CREST Registered Penetration Tester (CRT) or Offensive Security Certified Professional (OSCP)

Comfortable working odd hours

Be an independent learner

Must be technical to perform ethical hacking for projects

Able to articulate the security issues to customers & developers and provide suggestions for remediation

Any security certifications like CSSLP, CISSP, CREST, CEH, CPSA, GWAPT, GMOB will be an added-advantage