Company Details

Who we are?

Finvasia is a global fintech company offering technology-driven financial services across trading,

investing, and wealth management.

What we do?

With a strong presence in multiple countries, Finvasia focuses on innovation, zero-cost trading

solutions, and empowering users through advanced platforms and tools.

Know more about us:

-
Website Finvasia - https://finvasia.com/

o https://shoonya.com/

o https://jumpp.finance/

- Follow us on LinkedIn Page - https://www.linkedin.com/company/finvasia/

o https://www.linkedin.com/company/shoonyadotcom/

o https://www.linkedin.com/company/jumpp-finance/

Mandatory Skills & Experience

1. Extensive hands-on experience in security testing of Mobile Applications, APIs, and Web

Applications.

2. Strong understanding of AWS Cloud Security architecture, controls, and security services.

3. Hands-on experience with security testing and assessment tools such as Burp Suite, MobiSF,

and related security utilities.

4. Strong understanding of Mobile, Web, and API Security frameworks and industry best

practices.

5. Deep knowledge of OWASP Top 10 vulnerabilities, attack vectors, and remediation strategies.

6. Experience in leading and executing VAPT, DAST, and SAST assessments.

FINVASIA CENTRE D 179, Phase 8 B (Sector 74) ,Industrial Area, Mohali, Punjab, India 160055 Phone: +91 (phone hidden)|

Fax: 91-(phone hidden) |Email:[email protected]| www.finvasia.com

7. Possession of at least one recognized Cyber Security or Mobile Security certification (e.g.,

CEH, OSCP, eMAPT, eWPT, CISSP, CCSP, AWS Security Specialty).

8.



Strong understanding of authentication and authorization mechanisms such as OAuth 2.0,

OIDC, SSO, CAS, SAML, and JWT.

9. Good understanding of Mobile Application Security frameworks, secure coding practices, and

mobile threat landscapes.

10. Experience in cloud security reviews, security architecture assessments, and security

consulting for development and infrastructure teams.

11. Ability to perform threat modeling, security risk assessments, and remediation planning.

12. Experience in mentoring junior security engineers and driving security best practices across

projects.

Technical Expertise

-
Robust experience in Enterprise Application Security.
- Hands-on expertise in Mobile Application Security (Android/iOS).
- Strong knowledge of OWASP Top 10 & OWASP MASVS.
- Hands-on experience with Burp Suite, Frida, MobSF, Jadx, Ghidra, OWASP ZAP, SQLMap,

Nessus, and Nmap.

- Experience in Web, API, and Mobile Penetration Testing.
- Understanding of Secure SDLC and DevSecOps practices.
- Cloud Security knowledge (AWS/Azure/GCP) is preferred.
- Scripting knowledge in Python or Bash preferred.

Qualifications & Years of Experience

-
Bachelor’s or master’s degree in computer science, Cyber Security, Engineering, or related

field.

- 12–15 years of experience in Application Security, VAPT, or Product Security roles.
- Prior experience in FinTech, Product-Based Companies, BFSI, or Enterprise Security

environments preferred.

- Certifications such as CEH, OSCP, CAPen, CAPT, or CISSP are preferred

📌 Lead Application Security Engineer (Nagar)
🏢 FINVASIA CAREER
📍 Nagar