Job Title: Application Security Analyst
Location: DLF Cybercity, Porur, Chennai- India
Experience: 4 - 8 Years
About the Job:
We are looking for an Application Security Analyst who will ensure that mobile and web applications are developed, deployed, and maintained based on security standards and best practices to protect the organization from potential threats and vulnerabilities. This role will work closely with development, network security, and technology teams to embed security throughout the software development lifecycle.
Job Responsibilities:
Mobile and Web Application Penetration Testing
Perform static and agile analysis of Android and iOS applications to uncover insecure data storage, weak cryptography, SSL pinning/root detection bypass, and other mobile application risks.
Test anti-tampering and device binding controls such as RASP, root/jailbreak detection, device attestation, and biometric authentication implementation.
Conduct web application penetration testing against the OWASP Top 10, including injection, broken authentication/session management,
and access control vulnerabilities, across customer and internal-facing web portals.
Document findings with risk ratings, proof of concept, and remediation recommendations, and perform retesting through closure.
API Security Testing
Conduct API penetration testing on internal and externally exposed APIs using the OWASP API Security Top 10 as the baseline methodology.
Test authentication and session handling, mTLS enforcement, token replay/reuse scenarios, and authorization controls.
Evaluate rate limiting, throttling, and anti-automation controls against brute force, credential stuffing, and enumeration attacks on customer-facing APIs.
Review API Gateway and WAF rule effectiveness against attack payloads and coordinate with the Network Security team on ruleset fine-tuning.
Secure SDLC and Application Security Governance
Embed security checkpoints across the SDLC, including security requirements revie
📌 Application Security Analyst (Chennai)
🏢 Tonik
📍 Chennai