Penetration Tester – Application Security (VAPT)

Ref: JO-2605-360705

• Environment: In-office
• Contract Type: Contract
• Starts: 2026-08-01
• Duration: 12 Months

An opportunity for a skilled Application Penetration Tester to deliver security testing across web, mobile, and API environments.

Key Responsibilities:

• Perform web, mobile, and API penetration testing
• Identify vulnerabilities in authentication, authorization, and business logic
• Attempt bypass of WAF and API security controls
• Deliver detailed reports with proof-of-concept exploits
• Retest vulnerabilities and validate remediation
• Support threat modelling for new applications

 

Requirements:

• 3+ years in application security testing
• Strong experience with Burp Suite, OWASP ZAP, Postman, etc.
• Knowledge of OWASP Top 10, API Top 10, MASVS
• Scripting skills (Python, Bash, PowerShell)
• Certifications such as OSCP, GCIH, CISSP desirable

Salt is acting as an Employment Business in relation to this vacancy.