Crown Jewel

We are seeking a highly experienced Senior Application Security Tester with 10+ years of deep, hands-on experience in web application and mobile security testing within fintech or banking environments. The candidate mentor the team and will be responsible for executing complex security assessments, Web, API, mobile, microservices testing across mission critical financial platforms.

Role Overview

• Requirement: Senior Application Security Tester
• Domain: Banking / Fintech
• Location: Onsite Navi Mumbai
• Role Type: Full-time

Key Responsibilities

• Perform manual and automated security testing (black box, grey box, and fuzz testing) across critical web, mobile (iOS/Android), API, and microservices architectures.
• Conduct deep-dive reviews, static/dynamic/runtime analysis, and workflow checks to uncover logic flaws, cryptography weaknesses, RASP/SSL bypass issues, and authorization failures.
• Perform in-depth testing of financial transaction workflows, payment gateways, and critical API endpoints.
• Identify, validate, and exploit vulnerabilities (including multi-stage exploit chains and privilege escalation) to build impactful Proof-of-Concepts (PoCs).
• The testing approach should include identifying and validating multi stage exploit chains, where multiple weaknesses can be combined to demonstrate realistic attack paths.
• Design and implement comprehensive test strategies for web, APIs, mobile and microservices.
• Review applications and create customised attack models and plans.
• Mentor juniors on testing scenarios, best testing practices and technical skills.
• Build, scale, and maintain robust test automation frameworks from scratch.
• Hands-on expertise in application security testing tools like Burp Suite Pro, OWASP ZAP, mobile testing toolkit, API testing toolkit, SAST/DAST tools.
• Knowledge of OWASP Top 10, CWE Top 25, OWASP API Top 10, NIST, MASVS, MASTG.
• Experience with scripting (Python/JavaScript) for automation or testing enhancement.
• Ability to map vulnerabilities to risk severity and remediation guidelines.
• Prepare detailed technical and executive reports for stakeholders.
• Strong leadership, cross-functional communication, and complex problem-solving abilities.

Mandatory Certifications any one from list

• OSCP, OSWE, eWPTX, GWAPT, CISSP, CISM, CEH, CREST-CRT.

Soft Skills

• Excellent written and verbal communication and documentation skills.
• Strong analytical and complex problem-solving abilities.
• Ability to multitask and manage multiple critical assessments in parallel.
• Stakeholder management across engineering, product, and risk functions.