Pentester/Application Security Engineer

• Provide technical guidance in supporting member firms in conducting necessary remedial actions and responding to client vulnerability questions or disclosures.
• Help develop tooling deployment and relevant scanning configurations to enhance practical testing processes.
• Escalates key risks and issues to the relevant Regional Operations Manager which needs special attention or holds urgency.
• Operate in the wider organization to drive risk reduction goals and in the continuous improvement vulnerability related services.
• as needed to meet customer requests support code assessment and network infrastructure

Good to have knowledge of SAST & SCA.

• Typical security testing activities: o Software/Web Application/Web Services penetration testing o network Penetration Testing o Mobile Application Penetration Testing o Thick Client Penetration Testing o Knows scripting language. o Review test cases from time to time

Minimum Experience - 8 + years Preferred Certification - CISSP, OSCP/CPT/CEPT/ CMWAPT

SYSMIND LLC is an Equal Employment Opportunity employer. All qualified applicants will receive consideration for employment without any discrimination. We promote and support a diverse workforce at all levels in the company. All job offers are contingent upon completion of a satisfactory background check and reference checks. Additionally passing the drug test may also be required. All contractors intending to work on SYSMIND’s W2 are “at will” employees.

• Have expertise in Application Security.
• Having at least 8 yrs of hands on experience in Pentesting.
• Excellent communication skills
• Having excellent knowledge of tools like Burp suite.
• Preferred to have knowledge of automation languages like Python.
• Assisting in technical scoping of security testing activities.
• Should have knowledge on LLM
• Good understanding of CVSS scoring.
• curation and assessment of vulnerability data (across multiple platforms/tools) from a manual penetration perspective, to focus on true exploitation.
• Provide consultative guidance to customers on findings identified in a clear and actionable fashion both in writing and verbally.
• Curation and assessment of vulnerability data (across multiple platforms/tools) from a code assessment perspective, to ensure false positive review and analysis to provide target results to customers.