CHENNAI · FULLTIME
API Penetration Tester
firstsoft solutions
Chennai · onsite · Posted 1d ago
Sourced from
Undisclosed4–8 yrsfulltimeChennai
About a minute. You'll make an account on the way through.
agent · working
- Read this posting0.4s
- Found the form on Naukri · 8 questions to answer1.8s
- Decided the answers for all of them2.8s
- Tailor your résumé to this role
- Waiting for you
Section · 01
About this role
API Penetration Tester
Location: India
Work Model: Remote / Offshore
Experience: 4-8 Years
Engagement: Contract / Project-Based
Work Model: Remote / Offshore
Experience: 4-8 Years
Engagement: Contract / Project-Based
Job Summary
We are looking for an experienced API Penetration Tester to support a cybersecurity project for a Canadian public-sector client.The ideal candidate should have strong hands-on experience in API and web application security testing, especially manual penetration testing.
Responsibilities
The candidate will test APIs for security vulnerabilities, review authentication and authorization controls, identify business-logic issues, validate findings, and prepare clear technical reports.
The role will include testing REST APIs, user roles, tokens, API keys, access controls, data exposure, input validation, and other common API security risks.
The candidate will also participate in remediation validation after identified issues are fixed.
Required Skills
Strong experience with:
- API and Web Application Penetration Testing
- OWASP API Security Top 10
- Burp Suite
- Postman
- Swagger / OpenAPI
- JWT, OAuth 2.0 and API authentication
- Authorization and privilege escalation testing
- Business-logic testing
- Vulnerability validation and reporting
Experience with Python, Nmap, OWASP ZAP, Azure, AWS, or API gateways is an added advantage.
Experience
Candidates should have 4 - 8 years of cybersecurity experience , with strong hands-on experience in application or API penetration testing.
Experience working with enterprise, government, financial, healthcare, or other regulated clients is preferred.
Certifications
Certifications such as OSCP, eWPT, Burp Suite Certified Practitioner, CEH, GPEN, or GWAPT are preferred but not mandatory.
Communication
The candidate should have good written and verbal English communication skills and be comfortable joining occasional meetings with Canadian client teams.
Important
This is a hands-on penetration-testing role.
Candidates whose experience is mainly running automated vulnerability scanners without strong manual testing experience may not be suitable.
Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.
Sourced from naukri
Section · 02
Skills
Oauth 0Postman ToolVulnerabilityEnglish CommunicationapisOWASPweb applicationapi securityamazon web servicescehBurp SuiteOscpOAuthNmapOWASP ZAPPythonHealthcaremanual testingSwaggerCyber SecurityPenetration TestingMicrosoft Azure
Section · Company
About Firstsoft Solutions
firstsoft solutions
Software Product
Monmouth Junction
US
₹3.8L PA avg
Avg at Firstsoft Solutions
About
Provides technology consulting to align IT strategies with business objectives, enhancing growth and client satisfaction.
Industries
Software Product
Employee ratings
10 reviews
3.4/ 5
Culture
2.8
Career growth
2.5
Work-life
3.1
Employees rate it well for
Overall Company34Work-Life Balance31
Find them on