Penetration Tester Job in Mumbai at Willis Towers Watson (WTW)

Willis Towers Watson (WTW) is hiring for the role of Penetration Tester!

Responsibilities of the Candidate:

• Vulnerability Assessment: Conducting Comprehensive Assessments Of Web Applications To Identify Security Vulnerabilities, Such As Cross-Site Scripting (XSS), SQL Injection, Authentication Flaws, And Insecure Configurations, And Use These To Penetrate Deeper Into The Application/Server.
• Penetration Testing: Performing Controlled Attacks On Web Applications And APIs To Simulate Real-World Hacking Attempts And Identify Potential Entry Points For Attackers. This involves Utilizing Various Techniques, Tools, And Methodologies To Exploit Vulnerabilities And Gain Access.
• Security Analysis: Analyzing The Results Of Penetration Tests To Assess The Severity Of Identified Vulnerabilities, Their Potential Impact On The System And The Business, And The Likelihood Of Exploitation.
• Reporting And Documentation: Preparing Detailed Reports That Document The Findings, Including Identified Vulnerabilities, Attack Vectors, And Recommendations For Remediation. These Reports Typically Outline The Risks Associated With Each Vulnerability And Provide Guidance On How To Mitigate Them.
• Remediation Support: Collaborating With Developers And System Administrators To Assist In The Remediation Of Identified Vulnerabilities. This May Involve Providing Guidance On Secure Coding Practices, Recommending Security Controls, Or Validating The Effectiveness Of Implemented Fixes.
• Stay Up To Date: Keeping Abreast Of The Latest Web Application Vulnerabilities, Attack Techniques, Security Tools, And Industry Best Practices. This Includes Staying Informed About Emerging Threats And Trends In Web Application Security.
• Ethical Approach: Conducting All Testing And Assessment Activities Within A Legal And Ethical Framework, Ensuring That The Organization's Systems And Data Are Not Compromised Or Harmed During The Process.
• Continuous Improvement: Engaging In Professional Development Activities, Such As Attending Conferences, Participating In Training Programs, And Obtaining Relevant Certifications, To Enhance Knowledge And Skills In Web Application Security.