11 Sep
|
Comviva
|
Bengaluru
Job Title: Senior Security Engineer – Application Security
Job Summary
We are looking for a passionate and hands-on Senior Security Engineer to join our Application Security team. The ideal candidate should have strong experience in penetration testing of Web, API, Android and iOS applications, along with valuable knowledge of DevSecOps, CI/CD security and AI-augmented security testing.
Key Responsibilities
Perform manual and automated penetration testing of Web, API, Android and iOS applications.
Identify, validate and report security vulnerabilities and provide actionable remediation recommendations.
Perform security testing covering OWASP Top 10, OWASP API Security Top 10 and OWASP Mobile Top 10/MASVS.
Conduct advanced testing for authentication, authorization, IDOR/BOLA, business logic, injection, session management, data protection and API security.
Perform Android/iOS security testing including static/dynamic analysis, reverse engineering, SSL pinning, secure storage, WebView and runtime security testing.
Use tools such as Burp Suite, MobSF, Frida, Objection, JADX,
Nmap and vulnerability scanners.
Integrate and support security tools such as SAST, DAST, SCA and vulnerability scanning within CI/CD pipelines.
Develop scripts and automation using Python, JavaScript, Bash or similar languages to improve security testing efficiency.
Leverage AI/LLM-based tools for AI-augmented security testing, including endpoint discovery, JavaScript analysis, test-case/payload generation, response analysis and security reporting.
Participate in threat modeling, architecture reviews and secure SDLC activities using methodologies such as STRIDE/PASTA.
Collaborate with developers, architects and DevOps teams to drive vulnerability remediation and improve application security.
Mentor junior team members and contribute to improving security testing methodologies and automation.
Required Skills
3–5 years of hands-on experience in Application Security/Penetration Testing.
📌 Senior Engineer (Bengaluru)
🏢 Comviva
📍 Bengaluru