Application Security Intern

About the team:

At Aspire, we recognize that data and infrastructure security are paramount to the success and trust of our customers. Our Security Team is at the forefront of protecting and securing our systems, ensuring compliance with industry best practices, and continuously learning and evolving to stay ahead of emerging threats. Our emphasis extends to data privacy, seamlessly integrating it into our security initiatives.

About the role:

• Assist development teams in implementing penetration tests as part of the Secure Software Development Life Cycle (Secure SDLC).
• Conduct security assessments for both web and mobile applications using tools such as Burp Suite.
• Work closely with the Engineering team to identify and resolve security issues, and suggest appropriate fixes.

Minimum qualifications:

• Proficiency with penetration testing tools and frameworks (e.g. Burp Suite, SQLMap).
• Strong understanding of common attack vectors, network protocols, and web application security principles.
• Solid background in penetration testing and offensive security.
• Good understanding of the Software Development Life Cycle (SDLC) and the ability to embed security early in the development process.
• Expertise in bug bounties and Capture The Flag (CTF) competitions is a must.

Preferred qualifications:

• Relevant certifications, such as OSCP, OSCE, OSWE, or OSEP, are highly preferred.
• A good understanding of Git and mobile application testing tools like Drozer, MobSF, Frida, apktool, dex2jar, and jadx.
• Communicate effectively with a variety of internal teams, be self-driven, and take the initiative.