TEST MODULE LEAD - Security Testing
Happiest Minds Technologies · Noida · onsite · Posted today
Undisclosed5–10 yrsfulltimeSourced from
About a minute. You'll make an account on the way through.
About this role
Job Description - Application Security Engineer / Application Security Consultant
Experience: 5-10 Years
Location: Jaipur location preferred
Role Type: Full Time
Key Responsibilities Location: Jaipur location preferred
Role Type: Full Time
- Perform SAST (Static Application Security Testing) and DAST (Dynamic Application Security Testing) to identify and remediate application vulnerabilities.
- Conduct application penetration testing for web, mobile, and API-based applications.
- Assess applications for common security vulnerabilities such as:
- Cross-Site Scripting (XSS)
- Cross-Site Request Forgery (CSRF)
- SQL Injection
- Insecure Direct Object References (IDOR)
- URL Manipulation/Hacking
- Information Exposure and Sensitive Data Leaks
- Review security findings and work with development teams to drive remediation activities.
- Conduct API security testing using Postman and other API testing tools.
- Validate authentication and authorization controls, including MFA, SSO, and Identity Access Management workflows.
- Support secure SDLC initiatives and application security best practices.
- Prepare vulnerability assessment reports and provide risk-based recommendations.
- Strong hands-on experience in Application Security, Vulnerability Assessment, and Penetration Testing (VAPT).
- Experience with SAST/DAST tools, preferably Rapid7 or equivalent security platforms.
- Good understanding of OWASP Top 10 vulnerabilities and remediation techniques.
- Experience in web application, API, and security testing methodologies.
- Hands-on experience with Postman for API validation and security testing.
- Strong knowledge of authentication, authorization, and session management mechanisms.
- Experience with Fuzz Testing.
- End-to-end testing of MFA, Authentication, and SSO integrations.
- Security certifications such as CEH, OSCP, GWAPT, CSSLP, or Security+.
- Experience integrating security tools within CI/CD pipelines.
- Bachelors degree in Computer Science, Information Security, or related field.
- Strong analytical, troubleshooting, and communication skills.
- Ability to collaborate with development, DevOps, and security teams to improve application security posture.
This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.
Sourced from naukri
Skills
ScriptingDevopsPostman ToolCI/CD PipelinesOWASPapi securitycehRapid7OscpdastsastintegrationsIdentity Access ManagementApplication SecurityPenetration TestingCommunication SkillsInformation SecurityAPI TestingOwasp Top
About Happiest Minds Technologies
Happiest Minds Technologies
IT Services & Consulting
6.5k+
employees
2011
15 years old
Bangalore / Bengaluru, Karnataka
India
About
A technology firm specializing in digital transformation services utilizing advanced technologies to enhance enterprise efficiency and customer experience.
Industries
IT Services & Consulting
Employee ratings
1,441 reviews
3.4/ 5
Culture
3.4
Career growth
2.8
Work-life
3.6
Employees rate it well for
Work Life Balance210Work Culture165Senior Management138Salary104Learning80
Find them on