Description

We are looking for a Security-focused QA Engineer with a solid development background to ensure our web and API-based systems are secure, resilient, and production-ready.

In this hybrid role, you will design and build automated security testing, validate secure coding practices, and collaborate closely with Engineering, DevOps, and Security teams to embed security throughout the SDLC.

This is a hands-on role with measurable impact on how security is built, tested, and shipped.

Key Responsibilities
Design, develop, and maintain automated security tests, including:
Static and Agile Application Security Testing (SAST/DAST), fuzz testing, and vulnerability and dependency scanning
CI/CD pipelines in collaboration with developers and DevOps engineers
Identify, document, and verify remediation of security vulnerabilities and defects
Define and maintain security test strategies, test cases, and QA documentation
Continuously improve security testing coverage, tooling, and processes across the development lifecycle
Support secure coding practices through testing feedback and participation in code reviews




Collaborate with cross-functional teams to ensure security is embedded without slowing delivery

Required Qualifications
Education: Bachelors degree in Computer Science, Information Technology, or equivalent practical experience
Experience: 35 years in QA automation, application security, or software development
Development & Automation Skills: Practical coding experience in Python, Java, C#, JavaScript, or similar, used for test automation, scripting, and API security testing
Application Security Fundamentals: Strong understanding of OWASP Top 10, secure SDLC principles, and common web/API vulnerabilities
Security Testing Tools: Hands-on experience with SAST (e.g., SonarQube), DAST (e.g., Burp Suite, OWASP ZAP), and dependency scanning tools (e.g., Snyk, OWASP Dependency-Check)
CI/CD & Version Control: Experience with Git and integrating automated security checks into CI/CD pipelines
Problem Solving: Ability to analyze vulnerabilities, assess risk, verify fixes, and provide actionable recommendations
Communication: Robust written and verbal communication skills; able to clearly document and explain security findings to cross-functional teams

📌 Qa Security Engineer Web & Application Security Maharashtra
🏢 BAUER Corporate Services
📍 Maharashtra