Job Description
Role Purpose
nTAC Security is looking for a highly skilled Security Engineer – OSCP Certified with robust hands-on expertise in penetration testing, vulnerability assessment, application security, network security, and offensive security .
nThe Security Engineer will be responsible for identifying, validating, and demonstrating security vulnerabilities across web applications, APIs, mobile applications, networks, cloud environments, and infrastructure. The role requires a strong offensive-security mindset, practical exploitation skills, and the ability to provide actionable remediation guidance to clients and internal teams.
nKey Responsibilities
n1. Vulnerability Assessment & Penetration Testing
n
- n
- Perform end-to-end Vulnerability Assessment and Penetration Testing (VAPT) across applications and infrastructure.n
- Conduct manual penetration testing rather than relying solely on automated scanning tools.n
- Identify, validate, exploit, and document security vulnerabilities.n




- Perform network and infrastructure penetration testing across internal and external environments.n
- Conduct security testing of web applications, APIs, mobile applications, and cloud-based environments.n
- Perform vulnerability verification and retesting after remediation.n
- Evaluate vulnerabilities based on technical severity, exploitability, and potential business impact.n

n2. Web Application & API Security
n
- n
- Perform advanced web application penetration testing aligned with OWASP Top 10 and relevant testing methodologies.n
- Test for vulnerabilities including SQL Injection, XSS, SSRF, IDOR, authentication and authorization weaknesses, insecure deserialization, file-upload vulnerabilities, business-logic flaws, and security misconfigurations.n
- Conduct API security assessments covering REST and other API architectures.n
- Identify complex authorization, authentication, session-management, and business-logic vulnerabilities.n

n3. Network & I

📌 Security Engineer (New Delhi)
🏢 TAC Security
📍 New Delhi