Application Security Consultant – API & Cloud Security

Remote support role
strictly 10+ years of relevant experience
can also DM me directly on whatsapp (phone hidden)
Availability between 6:30 pm till 2:30am ist

Application Security Consultant – API & Cloud Security

Tech Stack: API/Microservices Security, Burp Suite Professional, AWS, OWASP API Top 10, SAST (Semgrep, Checkmarx, Veracode), Python, JavaScript, Bash, Nmap.

Role: Perform hands-on security assessments and penetration testing, primarily focused on REST APIs and microservices, with additional testing across web/mobile applications, AWS environments, and source code.

Required: 3+ years of relevant security experience, strong manual API security testing and Burp Suite Skilled skills, and knowledge of authentication, authorization, BOLA/IDOR, injection, SSRF, business logic vulnerabilities, and access controls. Experience validating vulnerabilities, reviewing code/SAST results, assessing AWS security, scripting, and documenting findings with actionable remediation.

Preferred: OWASP ASVS/API Top 10, mobile application testing, AWS security assessments, and certifications such as OSCP, BSCP, OSWE, or GWAPT.

📌 Application Security Consultant – API (India)
🏢 Stackzy Technologies
📍 India