Security Testing Engineer

Job description

## **Job Description:** - We are seeking a highly skilled Automation Security Test Engineer with 3 years of experience in test automation and application security testing - The ideal candidate should possess strong expertise in Selenium Automation using Java or C test framework development CI CD integration and security testing methodologies including vulnerability assessment and DAST - Experience in secure application testing and quality engineering practices is highly desirable ## **Key Responsibilities:** - Key Responsibilities - Automation Testing - Design develop and maintain automation frameworks using Selenium WebDriver with Java or C - Develop and execute automated test scripts for Web API and Enterprise applications - Build reusable automation libraries and utilities - Integrate automation suites with CI CD pipelines - Perform regression smoke sanity and functional testing using automated frameworks - Analyze test results and provide detailed defect reports - Collaborate with developers business analysts and QA teams to ensure quality deliverables - Participate in test planning estimation and test strategy discussions - Security Testing - Perform comprehensive Security Testing and Assessment activities across applications APIs cloud environments and supporting infrastructure - Execute Dynamic Application Security Testing DAST Vulnerability Assessments and Security Validation activities using industry standard tools and methodologies - Conduct manual and automated security testing to identify vulnerabilities related to authentication authorization session management encryption access controls and business logic flaws - Assess applications against industry standards and frameworks such as OWASP Top 10 OWASP API Security Top 10 CWE NIST and SANS - Identify analyze prioritize and document security vulnerabilities with detailed risk ratings business impact analysis and remediation guidance - Perform false positive analysis vulnerability validation and retesting to verify remediation effectiveness - Collaborate closely with Development Architecture QA and DevSecOps teams to promote secure coding practices and integrate security into the Software Development Life Cycle SDLC - Perform security reviews threat assessments and risk based security evaluations for new and existing applications - Participate in vulnerability management activities including triage tracking risk acceptance reviews and remediation validation - Prepare detailed security assessment reports and effectively communicate findings risks and recommendations to technical and non technical stakeholders - Conduct false positive analysis and provide remediation recommendations - Validate authentication authorization session management encryption and access control mechanisms - Support compliance initiatives and security governance requirements ## **Technical Requirements:** - 3 years of experience in Application Security Testing Vulnerability Assessment and Security Validation - Strong hands on experience with DAST tools such as Burp Suite Pro HCL AppScan Acunetix Netsparker or equivalent - Solid understanding of Web API and Cloud Security concepts - Knowledge of OWASP Top 10 OWASP API Security Top 10 CVSS CWE and Secure SDLC practices - Experience in vulnerability reporting risk analysis remediation validation and stakeholder communication - Understanding of authentication protocols such as OAuth 2 - 0 OpenID Connect OIDC SAML JWT and MFA - Experience with Cloud Security Azure AWS GCP and container security assessments - Exposure to SAST SCA OSS Security Testing API Security Testing and Threat Modeling methodologies ## **Additional Responsibilities:** - Preferred Skills - Experience in IAM Security Testing Saviynt SailPoint Access Governance testing - Exposure to Performance Testing tools such as JMeter or LoadRunner - Experience working in DevSecOps environments - Knowledge of container technologies such as Docker and Kubernetes - Scripting knowledge in Python PowerShell or Shell scripting ## **Preferred Skills:** Technology->Security Testing->Security Testing - ALL,Technology->Testing Technologyes->Test Automation Technology,Technology->Java->Core Java,Technology->Automated Testing->Selenium-Java