We are seeking a highly skilled Senior Security Specialist (IC3) with 6-9 years of experience in Application Security & Penetration Testing (VAPT), and security testing methodologies. The ideal candidate should possess strong expertise in DAST, API Security Testing, Mobile Application Security Testing (MAST), and hands-on exposure to AI-driven security testing and AI security risks. This role will work closely with development, DevOps, architecture, and product teams to identify, assess, and remediate security vulnerabilities throughout the SDLC. /n Key Responsibilities /n Application Security /n /n

- Perform end-to-end application security assessments for web, mobile, and API applications.

/n

- Conduct threat modeling, secure design reviews, and architecture assessments.

/n

- Validate security controls and identify vulnerabilities using manual and automated techniques.

/n

- Review remediation recommendations and support development teams during vulnerability closure.

/n /n DAST (Agile Application Security Testing) /n /n

- Conduct DAST assessments using tools such as:

/n

- Burp Suite Enterprise/Professional

/n

- Invicti (Netsparker)

/n

- Checkmarx

/n

- Analyze and validate findings to eliminate false positives.

/n

- Support tuning and optimization of DAST tools.

/n

- Develop DAST scanning standards, processes, and reporting mechanisms.

/n /n API Security /n /n

- Perform API security testing against REST, SOAP, GraphQL, and Microservices architectures.

/n

- Validate API security controls including:

/n

- Authentication & Authorization

/n

- OAuth 2.0 / OIDC

/n

- JWT Security

/n

- Rate Limiting

/n

- Input Validation

/n

- API Abuse Scenarios

/n





- Conduct testing aligned with:

/n

- OWASP API Security Top 10

/n

- OWASP ASVS

/n

- OWASP Testing Guide

/n

- Utilize tools such as:

/n

- Postman

/n

- Burp Suite

/n

- OWASP ZAP

/n

- ReadyAPI

/n /n Mobile Application Security Testing (MAST) /n /n

- Perform Android and iOS application security assessments.

/n

- Conduct dynamic mobile application testing.

/n

- Assess data storage, encryption, certificate pinning, and API security implementations.

/n

- Use security tools such as:

/n

- MobSF

/n

- NowSecure

/n

- Burp Suite

/n /n VAPT Activities /n /n

- Conduct vulnerability assessments and penetration tests.

/n

- Validate exploitability and business impact of identified vulnerabilities.

/n

- Prepare detailed technical and executive reports.

/n

- Track remediation and support closure verification activities.

/n

- Collaborate with development teams to reduce recurring vulnerabilities.

/n /n AI Security & Emerging Technologies /n /n

- Assess security risks associated with AI/LLM-powered applications.

/n

- Understand and evaluate:

/n

- Prompt Injection

/n

- Data Leakage Risks

/n

- Model Poisoning

/n

- Insecure Plugin Integrations

/n

- Excessive Agency

/n

- Sensitive Information Disclosure

/n

- Familiarity with:

/n

- OWASP Top 10 for LLM Applications

/n

- GenAI Security Best Practices

/n

- Secure AI Development Lifecycle

/n

- Utilize AI-assisted security testing tools to improve assessment efficiency.

/n /n Secure SDLC Integration /n /n

- Collaborate with development and DevOps teams.

/n

- Support security gates within CI/CD pipelines.

/n

- Participate in security reviews and release approvals.

/n

📌 Senior Security Specialist (Salem)
🏢 Lennox India Technology Centre
📍 Salem