Company Profile Lennox (NYSE: LII) Driven by 130 years of legacy, HVAC and refrigeration success, Lennox provides our residential and commercial customers with industry-leading climate-control solutions.

At Lennox, we win as a team, aiming for excellence and delivering innovative, sustainable products and services. Our culture guides us and creates a workplace where all employees feel heard and welcomed. Lennox is a global community that values each team member’s contributions and offers a supportive environment for career development.

Come, stay, and grow with us.

We are seeking a highly skilled Senior Security Specialist (IC3) with 6-9 years of experience in Application Security & Penetration Testing (VAPT), and security testing methodologies.

The ideal candidate should possess strong expertise in DAST, API Security Testing, Mobile Application Security Testing (MAST) , and hands-on exposure to AI-driven security testing and AI security risks

. This role will work closely with development, DevOps, architecture, and product teams to identify, assess, and remediate security vulnerabilities throughout the SDLC.

Key Responsibilities Application Security

- Perform end-to-end application security assessments for web, mobile, and API applications.
- Conduct threat modeling, secure design reviews, and architecture assessments.
- Validate security controls and identify vulnerabilities using manual and automated techniques.
- Review remediation recommendations and support development teams during vulnerability closure.

DAST (Dynamic Application Security Testing)

- Conduct DAST assessments using tools such as:

- Burp Suite Enterprise/Professional

- Invicti (Netsparker)

- Checkmarx
- Analyze and validate findings to eliminate false positives.
- Support tuning and optimization of DAST tools.
- Develop DAST scanning standards, processes, and reporting mechanisms.

API Security

- Perform API security testing against REST, SOAP, GraphQL, and Microservices architectures.




- Validate API security controls including:
- Authentication & Authorization
- OAuth 2.0 / OIDC

- JWT Security

- Rate Limiting

- Input Validation

- API Abuse Scenarios

- Conduct testing aligned with
- OWASP API Security Top 10

- OWASP ASVS

- OWASP Testing Guide

- Utilize tools such as

- Postman

- Burp Suite

- OWASP ZAP

- ReadyAPI

Mobile Application Security Testing (MAST)

- Perform Android and iOS application security assessments.
- Conduct agile mobile application testing.
- Assess data storage, encryption, certificate pinning, and API security implementations.
- Use security tools such as:

- MobSF

- NowSecure

- Burp Suite

VAPT Activities

- Conduct vulnerability assessments and penetration tests.
- Validate exploitability and business impact of identified vulnerabilities.
- Prepare detailed technical and executive reports.
- Track remediation and support closure verification activities.
- Collaborate with development teams to reduce recurring vulnerabilities.

AI Security & Emerging Technologies

- Assess security risks associated with AI/LLM-powered applications.

- Understand and evaluate

- Prompt Injection

- Data Leakage Risks

- Model Poisoning

- Insecure Plugin Integrations

- Excessive Agency

- Sensitive Information Disclosure

- Familiarity with
- OWASP Top 10 for LLM Applications

- GenAI Security Best Practices

- Secure AI Development Lifecycle
- Utilize AI-assisted security testing tools to improve assessment efficiency.

Secure SDLC Integration

- Collaborate with development and DevOps teams.
- Support security gates within CI/CD pipelines.
- Participate in security reviews and release approvals.

Qualifications

- Bachelor’s degree in computer science, Cyber Security, Information Technology, or a related field.
- 6-9 years of experience in Application Security, VAPT, or Security Testing.
- Strong understanding of web, mobile, and API security principles.
- Experience interacting with development and architecture teams.
- Excellent analytical, problem-solving, and communication skills.

📌 Senior Security Specialist (Chennai)
🏢 Lennox India Technology Centre
📍 Chennai