Security Testing Engineer

Job Description:

• We are seeking a highly skilled Automation Security Test Engineer with 3 years of experience in test automation and application security testing
• The ideal candidate should possess strong expertise in Selenium Automation using Java or C test framework development CI CD integration and security testing methodologies including vulnerability assessment and DAST
• Experience in secure application testing and quality engineering practices is highly desirable

Key Responsibilities:

• Key Responsibilities
• Automation Testing
• Design develop and maintain automation frameworks using Selenium WebDriver with Java or C
• Develop and execute automated test scripts for Web API and Enterprise applications
• Build reusable automation libraries and utilities
• Integrate automation suites with CI CD pipelines
• Perform regression smoke sanity and functional testing using automated frameworks
• Analyze test results and provide detailed defect reports
• Collaborate with developers business analysts and QA teams to ensure quality deliverables
• Participate in test planning estimation and test strategy discussions
• Security Testing
• Perform comprehensive Security Testing and Assessment activities across applications APIs cloud environments and supporting infrastructure
• Execute Dynamic Application Security Testing DAST Vulnerability Assessments and Security Validation activities using industry standard tools and methodologies
• Conduct manual and automated security testing to identify vulnerabilities related to authentication authorization session management encryption access controls and business logic flaws
• Assess applications against industry standards and frameworks such as OWASP Top 10 OWASP API Security Top 10 CWE NIST and SANS
• Identify analyze prioritize and document security vulnerabilities with detailed risk ratings business impact analysis and remediation guidance
• Perform false positive analysis vulnerability validation and retesting to verify remediation effectiveness
• Collaborate closely with Development Architecture QA and DevSecOps teams to promote secure coding practices and integrate security into the Software Development Life Cycle SDLC
• Perform security reviews threat assessments and risk based security evaluations for new and existing applications
• Participate in vulnerability management activities including triage tracking risk acceptance reviews and remediation validation
• Prepare detailed security assessment reports and effectively communicate findings risks and recommendations to technical and non technical stakeholders
• Conduct false positive analysis and provide remediation recommendations
• Validate authentication authorization session management encryption and access control mechanisms
• Support compliance initiatives and security governance requirements

Technical Requirements:

• 3 years of experience in Application Security Testing Vulnerability Assessment and Security Validation
• Strong hands on experience with DAST tools such as Burp Suite Pro HCL AppScan Acunetix Netsparker or equivalent
• Solid understanding of Web API and Cloud Security concepts
• Knowledge of OWASP Top 10 OWASP API Security Top 10 CVSS CWE and Secure SDLC practices
• Experience in vulnerability reporting risk analysis remediation validation and stakeholder communication
• Understanding of authentication protocols such as OAuth 2
• 0 OpenID Connect OIDC SAML JWT and MFA
• Experience with Cloud Security Azure AWS GCP and container security assessments
• Exposure to SAST SCA OSS Security Testing API Security Testing and Threat Modeling methodologies

Additional Responsibilities:

• Preferred Skills
• Experience in IAM Security Testing Saviynt SailPoint Access Governance testing
• Exposure to Performance Testing tools such as JMeter or LoadRunner
• Experience working in DevSecOps environments
• Knowledge of container technologies such as Docker and Kubernetes
• Scripting knowledge in Python PowerShell or Shell scripting

Preferred Skills:

Technology->Security Testing->Security Testing - ALL,Technology->Testing Technologyes->Test Automation Technology,Technology->Java->Core Java,Technology->Automated Testing->Selenium-Java