Security Tester Technology Department
Grape Worldwide · Gurugram · onsite · Posted 47d ago
About a minute. You'll make an account on the way through.
About this role
Security Tester – Technology Department
Location: New Delhi / Hybrid
Department: Technology
Reporting To: Engineering Manager / Head of Technology
Company: Grapes Worldwide
About Grapes Worldwide
Grapes Worldwide is a digitally driven integrated communication and technology company that combines
creativity, data, media, and technology to deliver innovative solutions for leading brands. We are looking for a
highly skilled Security Tester who will play a critical role in ensuring the security, resilience, and compliance of our
digital products, platforms, and applications.
Position Overview
We are seeking a detail-oriented and proactive Security Tester to identify, assess, and mitigate security
vulnerabilities across web applications, mobile applications, APIs, cloud infrastructure, and internal systems. The
ideal candidate will have hands-on experience in penetration testing, vulnerability assessments, secure
development practices, and application security testing.
This role requires close collaboration with developers, DevOps engineers, product teams, and technology
leadership to ensure security is embedded throughout the software development lifecycle (SDLC).
Key Responsibilities
Security Testing & Assessment
● Conduct comprehensive vulnerability assessments and penetration testing (VAPT) of web applications,
mobile applications, APIs, and cloud environments.
● Identify, validate, and document security vulnerabilities using industry-standard methodologies.
● Perform manual and automated security testing throughout the development lifecycle.
● Evaluate application security against the latest security threats and attack vectors.
● Conduct authentication, authorization, session management, and access control testing.
Application Security
● Review application architecture and code for security weaknesses.
● Collaborate with developers to remediate vulnerabilities and implement secure coding practices.
● Validate security fixes and perform regression security testing.
● Assess APIs for security flaws, including authentication, authorization, and data exposure risks.
Cloud & Infrastructure Security
● Perform security assessments of cloud environments (AWS, Azure, GCP).
● Evaluate infrastructure configurations, network security controls, and IAM policies.
● Identify misconfigurations and security gaps in containerized and serverless environments.
Security Compliance & Governance
● Ensure adherence to security frameworks such as OWASP Top 10, OWASP ASVS, NIST, CIS Benchmarks, and
industry best practices.
● Assist in security audits, compliance assessments, and risk evaluations.
● Support security awareness initiatives and contribute to secure SDLC processes.
Reporting & Documentation
● Prepare detailed vulnerability assessment reports with risk ratings and remediation recommendations.
● Present findings to technical and non-technical stakeholders.
● Maintain documentation of security assessments, testing methodologies, and remediation tracking.
Required Qualifications
Education
● Bachelor's degree in Computer Science, Information Security, Cyber Security, Information Technology, or a
related field.
Experience
● 3–6 years of hands-on experience in Application Security Testing, Vulnerability Assessment, and
Penetration Testing.
● Experience testing web applications, APIs, mobile applications, and cloud environments.
● Prior experience working within Agile development teams.
Sourced from foundit