Description

We are looking for a Security-focused QA Engineer with a strong development background to ensure our web and API-based systems are secure, resilient, and production-ready.

In this hybrid role, you will design and build automated security testing, validate secure coding practices, and collaborate closely with Engineering, DevOps, and Security teams to embed security throughout the SDLC.

This is a hands-on role with measurable impact on how security is built, tested, and shipped.

Key Responsibilities

- Design, develop, and maintain automated security tests, including:
- Static and Agile Application Security Testing (SAST/DAST), fuzz testing, and vulnerability and dependency scanning
- CI/CD pipelines in collaboration with developers and DevOps engineers
- Identify, document, and verify remediation of security vulnerabilities and defects
- Define and maintain security test strategies, test cases, and QA documentation
- Continuously improve security testing coverage, tooling, and processes across the development lifecycle
- Support secure coding practices through testing feedback and participation in code reviews
- Collaborate with cross-functional teams to ensure security is embedded without slowing delivery





Required Qualifications

- Education: Bachelors degree in Computer Science, Information Technology, or equivalent practical experience
- Experience: 35 years in QA automation, application security, or software development
- Development & Automation Skills: Practical coding experience in Python, Java, C#, JavaScript, or similar, used for test automation, scripting, and API security testing
- Application Security Fundamentals: Strong understanding of OWASP Top 10, secure SDLC principles, and common web/API vulnerabilities
- Security Testing Tools: Hands-on experience with SAST (e.g., SonarQube), DAST (e.g., Burp Suite, OWASP ZAP), and dependency scanning tools (e.g., Snyk, OWASP Dependency-Check)
- CI/CD & Version Control: Experience with Git and integrating automated security checks into CI/CD pipelines
- Problem Solving: Ability to analyze vulnerabilities, assess risk, verify fixes, and provide actionable recommendations
- Communication: Strong written and verbal communication skills; able to clearly document and explain security findings to cross-functional teams

📌 QA Security Engineer (Web & Application Security) (Maharashtra)
🏢 BAUER Corporate Services
📍 Maharashtra