TEST MODULE LEAD - Security Testing
Happiest Minds Technologies · IT Services & Consulting
- Noida
- On-site
- Posted today
- Cybersecurity
About the job
a {
text-decoration: none;
color: #464feb;
}
tr th, tr td {
border: 1px solid #e6e6e6;
}
tr th {
background-color: #f5f5f5;
}
Job Description - Application Security Engineer / Application Security Consultant
Experience: 5-10 Years
Location: Jaipur location preferred
Role Type: Full Time
Key Responsibilities
Perform SAST (Static Application Security Testing) and DAST (Dynamic Application Security Testing) to identify and remediate application vulnerabilities.
Conduct application penetration testing for web, mobile, and API-based applications.
Assess applications for common security vulnerabilities such as: - Cross-Site Scripting (XSS)
Cross-Site Request Forgery (CSRF)
SQL Injection
Insecure Direct Object References (IDOR)
URL Manipulation/Hacking
Information Exposure and Sensitive Data Leaks
Review security findings and work with development teams to drive remediation activities.
Conduct API security testing using Postman and other API testing tools.
Validate authentication and authorization controls, including MFA, SSO, and Identity Access Management workflows.
Support secure SDLC initiatives and application security best practices.
Prepare vulnerability assessment reports and provide risk-based recommendations.
Required Skills
Strong hands-on experience in Application Security , Vulnerability Assessment , and Penetration Testing (VAPT) .
Experience with SAST/DAST tools , preferably Rapid7 or equivalent security platforms.
Good understanding of OWASP Top 10 vulnerabilities and remediation techniques.
Experience in web application, API, and security testing methodologies.
Hands-on experience with Postman for API validation and security testing.
Strong knowledge of authentication, authorization, and session management mechanisms.
Good to Have
Experience with Fuzz Testing .
End-to-end testing of MFA, Authentication, and SSO integrations.
Security certifications such as CEH, OSCP, GWAPT, CSSLP, or Security+ .
Experience integrating security tools within CI/CD pipelines.
Qualifications
Bachelor's degree in Computer Science, Information Security, or related field.
Strong analytical, troubleshooting, and communication skills.
Ability to collaborate with development, DevOps, and security teams to improve application security posture.