Senior Application Security Tester

Role & responsibilities

We are seeking a highly experienced Senior Application Security Tester with 10+ years of deep, handson experience in web application and mobile security testing within fintech or banking environments. The candidate mentor the team and will be responsible for executing complex security assessments, Web, API, mobile, microservices testing across mission critical financial platforms.

Perform manual and automated security testing (black box, grey box, and fuzz testing) across critical web, mobile (iOS/Android), API, and microservices architectures. Conduct deep-dive reviews static/dynamic/runtime analysis, and workflow checks to uncover logic flaws, cryptography weaknesses, RASP/SSL bypass issues, and authorization failures. Perform indepth testing of financial transaction workflows, payment gateways, and critical API endpoints. Identify, validate, and exploit vulnerabilities (including multi-stage exploit chains and privilege escalation) to build impactful Proof-of-Concepts (PoCs). The testing approach should include identifying and validating multi stage exploit chains, where multiple weaknesses can be combined to demonstrate realistic attack paths. Design and implement comprehensive test strategies for web, APIs, mobile and microservices. Review applications and create customised attack models and plans. Mentor juniors on testing scenarios, best testing practices and technical skills. Build, scale, and maintain robust test automation frameworks from scratch. Hands-on expertise in application security testing tools like Burp Suite Pro, OWASP ZAP, mobile testing toolkit, API testing toolkit, SAST/DAST tools. Knowledge of OWASP Top 10, CWE Top 25, OWASP API Top 10, NIST, MASVS, MASTG. Experience with scripting (Python/JavaScript) for automation or testing enhancement. Ability to map vulnerabilities to risk severity and remediation guidelines. Prepare detailed technical and executive reports for stakeholders. Strong leadership, cross-functional communication, and complex problem-solving abilities.
Mandatory Certifications any one from list OSCP, OSWE, eWPTX, GWAPT, CISSP, CISM, CEH, CREST-CRT.

Soft Skills Excellent written and verbal communication and documentation skills. Strong analytical and complex problemsolving abilities. Ability to multitask and manage multiple critical assessments in parallel.

Stakeholder management across engineering, product, and risk functions.