BENGALURU · FULLTIME
Sr Engineer (Security)
Comviva Technology
Bengaluru · onsite · Posted 40d ago
Sourced from
Undisclosed3–5 yrsfulltimeBengaluru
About a minute. You'll make an account on the way through.
agent · working
- Read this posting0.5s
- Found the form on Naukri · 5 questions to answer1.8s
- Decided the answers for all of them2.6s
- Tailor your résumé to this role
- Waiting for you
Section · 01
About this role
Key Responsibilities
Penetration Testing Vulnerability Assessment
- Perform manual and automated penetration testing of Web, API, Android, and iOS applications.
- Identify, validate, and report security vulnerabilities with actionable remediation recommendations.
- Conduct security testing covering OWASP Top 10, OWASP API Security Top 10, and OWASP Mobile Top 10 / MASVS.
- Perform advanced testing across authentication, authorization, IDOR/BOLA, business logic, injection, session management, data protection, and API security.
Mobile Security Testing
- Conduct Android and iOS security testing including static and dynamic analysis, reverse engineering, SSL pinning bypass, secure storage, WebView, and runtime security testing.
- Use tools such as MobSF, Frida, Objection, and JADX/apktool.
Tooling DevSecOps
- Use Burp Suite, Nmap, and vulnerability scanners as part of routine assessment work.
- Integrate and support SAST, DAST, SCA, and vulnerability scanning within CI/CD pipelines.
- Develop scripts and automation using Python, JavaScript, Bash, or similar to improve testing efficiency.
AI-Augmented Security Testing
- Leverage AI/LLM-based tools for endpoint discovery, JavaScript analysis, test-case and payload generation, response analysis, and security reporting.
Secure SDLC Collaboration
- Participate in threat modeling, architecture reviews, and secure SDLC activities using methodologies such as STRIDE and PASTA.
- Collaborate with developers, architects, and DevOps teams to drive vulnerability remediation and improve overall application security posture.
Mentoring Continuous Improvement
- Mentor junior team members.
- Contribute to improving security testing methodologies and automation frameworks.
Required Skills
Technical - Mandatory
- 3-5 years of hands-on experience in application security / penetration testing.
- Strong hands-on experience across Web, API, Android, and iOS security testing.
- Strong knowledge of OWASP Top 10, OWASP API Security Top 10, MASVS/MSTG, and common vulnerability classes.
- Hands-on expertise with Burp Suite Professional.
- Working knowledge of MobSF, Frida, Objection, JADX/apktool, or equivalent mobile security tools.
- Solid understanding of REST APIs, OAuth, JWT, HTTP/HTTPS, TLS, and authentication/authorization mechanisms.
- Experience with CI/CD and DevSecOps security practices.
- Knowledge of SAST, DAST, SCA, and vulnerability management tools.
- Strong scripting and automation skills in Python, JavaScript, or Bash.
- Exposure to AI-powered / AI-assisted security testing tools and techniques.
Behavioural
- Strong analytical and problem-solving skills.
- Clear written and verbal communication, particularly for reporting findings to technical and non-technical audiences.
- Collaborative approach across development, architecture, and operations teams.
Preferred Qualifications
- Certifications such as OSCP, CEH, or equivalent.
- Experience with cloud, container, and microservices security.
- Knowledge of threat modeling, OWASP ASVS, NIST frameworks, and SANS Top 25.
Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.
Sourced from naukri
Section · 02
Skills
AutomationDevopsBashCI/CD Pipelinesapisapi securitycehdata protectionnistBurp SuiteDevsecopsdastEndpointLarge Language Models (LLMs)Mobile SecurityContainerAndroidJavascriptcloudApplication SecurityArchitectureMicroservicesArtificial Intelligence
Section · Company
About Comviva Technology
Comviva Technology
IT Services & Consulting
2.3k+
employees
1999
27 years old
Gurgaon,Haryana
India
₹11.9L PA avg
Avg at Comviva Technology
About
Comviva is one of the global leader in mobile solutions offering digital VAS, mobile finance and customer management solutions for telecom operators, aimed at both retail and corporate users.
Industries
IT Services & ConsultingInternetTelecom
Employee ratings
10 reviews
2.9/ 5
Culture
1.3
Career growth
1.7
Work-life
2.1
Employees rate it well for
Job Security32Skill Development30
Find them on