Primary skillsets:

1. Manual DAST/SAST assessment for Web Application, Mobile Application and API (VAPT) (burp Suite,owasp zap)
2. DAST/SAST assessments using automated tools like Veracode,Fortify,Webinspect etc
3. Basic/Intermediate experience in dev secops pipeline like Azure,Jenkins etc (Specifically Azure devops pipeline is required fo NewRez)
4. Good Articulation and Customer handling skills.
5. Strong knowledge on OWASP Top 10,CVE’s,CVSS to participate in remediation support.

Secondary Skillsets:

1. VA/PT for Infra/Network
2. Perform VA for Network devices using qualys tool
3. Strong knowledge on metric reports like MTTR, Risk score, QDS
4. Basic knowledge on cyber attack simulations using tools like RISKIQ and AttackIQ