Saturday to Wednesday
-
Loan -Health insurance
-Parking space
-Game room
-Occasional packages and gifts
این فرصت شغلی چقدر برای من مناسب است؟
1001 - 5000 employees
Insurance
Iranian company dealing only with Iranian entities
1395
Privately held
Loan توضیحات بیشتر
key Requirements
3 years experience in similar positionJob Description
We are looking for a Senior Web Application Penetration Tester with strong hands-on experience finding and exploiting complex vulnerabilities in modern web applications and APIs.
Key Responsibilities:
Key Responsibilities:
- Perform advanced web application and API penetration tests
- Identify and exploit authentication and authorization flaws, privilege escalation, and broken function-level access control
- Find business-logic vulnerabilities, race conditions, and workflow bypasses
- Exploit SSRF, SQL injection, XSS, insecure file upload, and command injection
- Test OAuth2/OIDC, SSO, JWT, and session-management implementations
- Perform advanced reconnaissance: subdomain and asset discovery, content discovery, parameter mining, JS analysis, and endpoint extraction
- Maintain and improve internal recon automation and tooling
- Continuously monitor the external attack surface for new and forgotten assets
- Expert-level Burp Suite usage, including extensions and custom tooling
- Deep understanding of JWT, caching, proxies, and modern web architectures
- Advanced authentication and authorization testing skills
- Strong business-logic and race-condition testing capability
- Strong API security knowledge
- Practical experience with Nuclei, ffuf, and sqlmap
Job Requirements
Gender
Men / Women
ثبت مشکل و تخلف آگهی
ارسال رزومه برای ازکی