Required Skills

MCP & AI Security

- Robust hands-on experience in MCP (Model Context Protocol) Security Testing.
- Understanding of MCP architecture, MCP servers, clients, tools, prompts, and resources.
- Experience identifying AI and MCP-specific security risks.
- Experience testing AI Agents, Copilot solutions, Agentic workflows, RAG systems, and LLM integrations.
- Knowledge of OWASP Top 10 for LLM Applications and AI Security best practices.

Application Security

- Web Application Security Testing.
- Mobile Application Security Testing (Android/iOS).
- API Security Testing.
- Secure Code Review.
- Threat Modeling and Risk Assessment.
- Authentication, Authorization, SSO, OAuth2, OpenID Connect, SAML.

Security Tools

- Burp Suite Enterprise/Professional.
- OWASP ZAP.
- MobSF. Appknox
- Snyk, Checkmarx, Veracode, Fortify or equivalent SAST tools.
- Postman, Swagger.
- SIEM and vulnerability management platforms.

Security Standards

- OWASP Top 10.
- OWASP API Security Top 10.
- OWASP Mobile Top 10.
- OWASP LLM Top 10.
- NIST Secure Development Framework.
- PCI-DSS, SOC2, ISO 27001 awareness.

📌 Security Testing Engineer (Pune)
🏢 Zensar
📍 Pune