Description

Key Responsibilities

- Lead and manage a team of security testers across multiple projects.
- Define and implement security testing strategies for Web, Mobile, APIs, and MCP-based applications.
- Perform and oversee security assessments including:
- MCP Security Testing
- Web Application Penetration Testing
- Mobile Application Security Testing (Android & iOS)
- API Security Testing
- Secure Code Review
- Threat Modeling

- Review MCP architecture, connector integrations, tool invocation mechanisms, and AI-agent interactions for security risks.
- Identify vulnerabilities related to:

- Prompt Injection
- Tool Poisoning
- Unauthorized Tool Access
- Data Leakage
- Excessive Permissions
- Authentication & Authorization Flaws
- Insecure Context Sharing
- AI Agent Abuse Scenarios

- Conduct security reviews for AI/LLM-enabled applications and MCP ecosystems.
- Provide remediation recommendations and work closely with development and architecture teams.
- Prepare security assessment reports and executive-level risk summaries.
- Participate in customer discussions, audits, and security governance meetings.
- Mentor and guide junior security testers and security engineers.

Required Skills

MCP & AI Security

- Strong hands-on experience in MCP (Model Context Protocol) Security Testing.
- Understanding of MCP architecture, MCP servers, clients, tools, prompts, and resources.
- Experience identifying AI and MCP-specific security risks.
- Experience testing AI Agents, Copilot solutions, Agentic workflows, RAG systems, and LLM integrations.
- Knowledge of OWASP Top 10 for LLM Applications and AI Security best practices.

Application Security





- Web Application Security Testing.
- Mobile Application Security Testing (Android/iOS).
- API Security Testing.
- Secure Code Review.
- Threat Modeling and Risk Assessment.
- Authentication, Authorization, SSO, OAuth2, OpenID Connect, SAML.

Security Tools

- Burp Suite Enterprise/Qualified.
- OWASP ZAP.
- MobSF. Appknox
- Snyk, Checkmarx, Veracode, Fortify or equivalent SAST tools.
- Postman, Swagger.
- SIEM and vulnerability management platforms.

Security Standards

- OWASP Top 10.
- OWASP API Security Top 10.
- OWASP Mobile Top 10.
- OWASP LLM Top 10.
- NIST Secure Development Framework.
- PCI-DSS, SOC2, ISO 27001 awareness.

Leadership Responsibilities

- Manage and mentor a team of 4–5 security professionals.
- Drive resource planning, estimations, and project execution.
- Establish security testing frameworks, processes, and governance.
- Conduct technical reviews and support practice development initiatives.
- Support presales, solutioning, and client presentations.

Preferred Qualifications

- Bachelor's or Master's degree in Computer Science, Cyber Security, or related field.
- Security certifications such as:
- CISSP
- OSCP
- CEH
- GWAPT
- CompTIA Security+
- GIAC Certifications

- Experience working with enterprise AI solutions, Microsoft Copilot ecosystem, and MCP-based platforms is highly preferred.

Key Competencies

- Strong leadership and stakeholder management skills.
- Excellent client-facing communication.
- Security architecture and consulting mindset.
- Problem-solving and analytical thinking.
- Ability to drive multiple security engagements simultaneously.

Responsibilities

OK

Qualifications

OK

📌 Senior Security Lead / Security Architect (India)
🏢 Zensar Technologies
📍 India