BENGALURU · FULLTIME
Security Testing Engineer
Infosys
Bengaluru · onsite · Posted 1d ago
Sourced from
Undisclosed3–8 yrsfulltimeBengaluru
About a minute. You'll make an account on the way through.
agent · working
- Read this posting0.8s
- Found the form on Naukri · 6 questions to answer1.1s
- Decided the answers for all of them2.8s
- Tailor your résumé to this role
- Waiting for you
Section · 01
About this role
Educational Requirements
Bachelor of Engineering
Service Line Infosys Quality Engineering
Responsibilities - Automation Testing
- Design, develop, and maintain automation frameworks using Selenium WebDriver with Java or C#.
- Develop and execute automated test scripts for Web, API, and Enterprise applications.
- Build reusable automation libraries and utilities.
- Integrate automation suites with CI/CD pipelines.
- Perform regression, smoke, sanity, and functional testing using automated frameworks.
- Analyze test results and provide detailed defect reports.
- Collaborate with developers, business analysts, and QA teams to ensure quality deliverables.
- Participate in test planning, estimation, and test strategy discussions.
- Security Testing
- Perform comprehensive Security Testing and Assessment activities across applications, APIs, cloud environments, and supporting infrastructure.
- Execute Dynamic Application Security Testing (DAST), Vulnerability Assessments, and Security Validation activities using industry-standard tools and methodologies.
- Conduct manual and automated security testing to identify vulnerabilities related to authentication, authorization, session management, encryption, access controls, and business logic flaws.
- Assess applications against industry standards and frameworks such as OWASP Top 10, OWASP API Security Top 10, CWE, NIST, and SANS.
- Identify, analyze, prioritize, and document security vulnerabilities with detailed risk ratings, business impact analysis, and remediation guidance.
- Perform false-positive analysis, vulnerability validation, and retesting to verify remediation effectiveness.
- Collaborate closely with Development, Architecture, QA, and DevSecOps teams to promote secure coding practices and integrate security into the Software Development Life Cycle (SDLC).
- Perform security reviews, threat assessments, and risk-based security evaluations for new and existing applications.
- Participate in vulnerability management activities including triage, tracking, risk acceptance reviews, and remediation validation.
- Prepare detailed security assessment reports and effectively communicate findings, risks, and recommendations to technical and non-technical stakeholders.
- Conduct false-positive analysis and provide remediation recommendations.
- Validate authentication, authorization, session management, encryption, and access control mechanisms.
- Support compliance initiatives and security governance requirements.
- Preferred SkillsExperience in IAM Security Testing (Saviynt, SailPoint, Access Governance testing).
- Exposure to Performance Testing tools such as JMeter or LoadRunner.
- Experience working in DevSecOps environments.
- Knowledge of container technologies such as Docker and Kubernetes.
- Scripting knowledge in Python, PowerShell, or Shell scripting.
- 3+ years of experience in Application Security Testing, Vulnerability Assessment, and Security Validation.
- Strong hands-on experience with DAST tools such as Burp Suite Pro, HCL AppScan, Acunetix, Netsparker, or equivalent.
- Solid understanding of Web, API, and Cloud Security concepts.
- Knowledge of OWASP Top 10, OWASP API Security Top 10, CVSS, CWE, and Secure SDLC practices.
- Experience in vulnerability reporting, risk analysis, remediation validation, and stakeholder communication.
- Understanding of authentication protocols such as OAuth 2.0, OpenID Connect (OIDC), SAML, JWT, and MFA.
- Experience with Cloud Security (Azure/AWS/GCP) and container security assessments.
- Exposure to SAST, SCA/OSS Security Testing, API Security Testing, and Threat Modeling methodologies.
- Technology->Testing Technologyes->Test Automation Technology
- Technology->Java->Core Java
- Technology->Security Testing->Security Testing - ALL
- Technology->Automated Testing->Selenium-Java
Sourced from naukri
Section · 02
Skills
AutomationCI/CD Pipelinesapisautomated testingapi securityamazon web servicesBurp Suiteautomated test scriptsauthentication protocolsAppscancloudCloud SecurityApplication SecurityArchitectureAutomation TestingcomplianceMicrosoft Azure
Section · Company
About Infosys
Infosys
IT Services & Consulting
323.6k+
employees
1981
45 years old
Bengaluru/Bangalore, Karnataka
India
About
Infosys is a global leader in next-generation digital services and consulting.
Industries
IT Services & ConsultingConsulting
Employee ratings
48,765 reviews
3.5/ 5
Culture
3.6
Career growth
2.6
Work-life
3.6
Employees rate it well for
Salary10252Work Life Balance6251Work Culture5404Learning4530Appraisal3780
Find them on