Cybersecurity Tester – Source Code Review & Penetration Testing

About the role

Sharp InnvoTech is looking for a skilled Cybersecurity Tester to lead manual security testing and source code review initiatives. You will work on web, mobile, and API‑based applications, identifying and exploiting security flaws without relying on automated scanners.

Key responsibilities

• Perform manual security testing of web, mobile, and API applications.
• Conduct thorough source code reviews to uncover security and logic vulnerabilities.
• Identify, exploit, and document findings in line with OWASP, SANS and NIST standards.
• Collaborate with developers and DevSecOps teams to explain vulnerabilities and recommend secure coding practices.
• Prepare detailed technical reports and executive summaries, including remediation steps.
• Retest patched issues to confirm fixes and compliance.
• Stay current on emerging threats, exploit techniques, and industry best practices.

Required profile

• Minimum 3 years of hands‑on experience in manual security testing and source code review.
• Strong understanding of secure coding practices and application security vulnerabilities.
• Familiarity with OWASP Top 10, CWE and SANS 25 vulnerability categories.
• Relevant certifications such as OSCP, CEH, GWAPT, GPEN or CRTP are a plus.

Required skills

• Manual security testing
• Source code review
• Web, mobile and API application testing
• OWASP Top 10, CWE, SANS 25 knowledge
• Vulnerability exploitation without automated tools
• Technical reporting and documentation
• Secure coding practices