We are seeking a highly skilled Senior Security Specialist (IC3) with 6-9 years of experience in Application Security & Penetration Testing (VAPT), and security testing methodologies. The ideal candidate should possess strong expertise in DAST, API Security Testing, Mobile Application Security Testing (MAST), and hands-on exposure to AI-driven security testing and AI security risks. This role will work closely with development, DevOps, architecture, and product teams to identify, assess, and remediate security vulnerabilities throughout the SDLC.

Key Responsibilities

Application Security
- Perform end-to-end application security assessments for web, mobile, and API applications.
- Conduct threat modeling, secure design reviews, and architecture assessments.
- Validate security controls and identify vulnerabilities using manual and automated techniques.
- Review remediation recommendations and support development teams during vulnerability closure.

DAST (Dynamic Application Security Testing)
- Conduct DAST assessments using tools such as:
- Burp Suite Enterprise/Professional




- Invicti (Netsparker)
- Checkmarx
- Analyze and validate findings to eliminate false positives.
- Support tuning and optimization of DAST tools.
- Develop DAST scanning standards, processes, and reporting mechanisms.

API Security
- Perform API security testing against REST, SOAP, GraphQL, and Microservices architectures.
- Validate API security controls including:
- Authentication & Authorization
- OAuth 2.0 / OIDC
- JWT Security
- Rate Limiting
- Input Validation
- API Abuse Scenarios
- Conduct testing aligned with:
- OWASP API Security Top 10
- OWASP ASVS
- OWASP Testing Guide
- Utilize tools such as:
- Postman
- Burp Suite
- OWASP ZAP
- ReadyAPI

Mobile Application Security Testing (MAST)
- Perform Android and iOS application security assessments.
- Conduct agile mobile application testing.
- Assess data storage, encryption, certificate pinning, and API security implementations.
- Use s

📌 Senior Security Specialist (Chennai)
🏢 Lennox India Technology Centre
📍 Chennai