things to learn

Experience with scripting languages (PHP, HTML/HTML5)

Knowledge in OOP and MVC methodologies

Experience with open source databases (MySQL)

Working knowledge of browser front end engineering (Javascript, CSS, DOM)

Experience consuming and creating web services (REST)

Knowledge and experience with Apache web server and other language specific OSS servers

Knowledge of XML, JSON formats

• 1. Good Knowledge of Client server architecture.
• 2. Good knowledge of security vulnerabilities (Eg: OWASP Top 10 vulnerabilities but, not limited only to the Top 10 vulnerabilities)
• 3. Experience in penetration testing and exploiting the vulnerabilities manually.
• 4. Experience on any Vulnerability scanners like Paros, WebScarab, BurpSuite, WebInspect, Nessus etc. Also, should be able to analyze the scan reports for false positives and false negatives.
• 5. Should have sound knowledge on communication protocols like HTTP, SSL, SSH, FTP, SFTP etc.
• 6. Desire to update themselves with the new technology, vulnerabilities and techniques to exploit.
• 7. Experience in Web Service security testing.
• 8. Experience in any scripting languages like shell, python or perl scripting.
• 9. Experience in testing flash application testing is preferred.
• 10. Good knowledge web page description languages like HTTM, XML, PHP etc.
• 11. Knowledge of how encoding and encryption works.
• 12. Should be able to debug logs.
• Network Security testing:
• Good knowledge on all the Communication Layers.
• Good knowledge on SSL, encryption and cipher algorithms