Experience with popular security detecting, penetration testing, web crawling tools is a plus, like ModSecurity, Snort, Burp Suite, OWASP ZAP, Metasploit, Sqlmap, Selenium, Puppeteer, etc. Understanding of Web technologies like HTML/CSS/Javascript/JSON/XML, and common Web security issues like OWASP top 10, including SQL injection, XSS, CSRF, MITM, DoS.