Job Description

Role Purpose

/n

TAC Security is looking for a highly skilled Security Engineer – OSCP Certified with robust hands-on expertise in penetration testing, vulnerability assessment, application security, network security, and offensive security.

/n

The Security Engineer will be responsible for identifying, validating, and demonstrating security vulnerabilities across web applications, APIs, mobile applications, networks, cloud environments, and infrastructure. The role requires a solid offensive-security mindset, practical exploitation skills, and the ability to provide actionable remediation guidance to clients and internal teams.

/n

Key Responsibilities

/n
Vulnerability Assessment & Penetration Testing

/n

/n
Perform end-to-end Vulnerability Assessment and Penetration Testing (VAPT) across applications and infrastructure.
/n
Conduct manual penetration testing rather than relying solely on automated scanning tools.
/n
Identify, validate, exploit, and document security vulnerabilities.
/n




Perform network and infrastructure penetration testing across internal and external settings.
/n
Conduct security testing of web applications, APIs, mobile applications, and cloud-based environments.
/n
Perform vulnerability verification and retesting after remediation.
/n
Evaluate vulnerabilities based on technical severity, exploitability, and potential business impact.
/n

/n
Web Application & API Security

/n

/n
Perform advanced web application penetration testing aligned with OWASP Top 10 and relevant testing methodologies.
/n
Test for vulnerabilities including SQL Injection, XSS, SSRF, IDOR, authentication and authorization weaknesses, insecure deserialization, file-upload vulnerabilities, business-logic flaws, and security misconfigurations.
/n
Conduct API security assessments covering REST and other API architectures.
/n
Identify complex authorization, authentication, session-management, and business-logic vulnerabilit

📌 Security Engineer Delhi (India)
🏢 TAC Security
📍 India