Description

Own application security testing and vulnerability management across the development lifecycle.

This role is hybrid.

Responsibilities

• Execute SAST and DAST scans to identify security defects in code and applications.
• Conduct VAPT, API security testing, and penetration testing on production and staging environments.
• Perform secure code reviews and threat modeling to address vulnerabilities early.
• Integrate security checks into CI/CD pipelines to enforce DevSecOps practices.
• Automate security testing workflows using Python or Java scripts.

Required Skills

• 4+ years of experience in Application Security or QA Security Engineering.
• Proficiency with Burp Suite and OWASP ZAP for manual and automated testing.
• Deep understanding of OWASP Top 10 and API security vulnerabilities.
• Hands-on experience with SAST/DAST tools and vulnerability assessment frameworks.
• Strong scripting skills in Python or Java for automation.
• Knowledge of CI/CD security integration and DevSecOps principles.
• Familiarity with cloud security basics and secure code review techniques.

Preferred Skills

• Experience with advanced threat modeling methodologies.

Key Skills

Education

Any Graduate