Required Skills

MCP & AI Security
Robust hands-on experience in MCP (Model Context Protocol) Security Testing.
Understanding of MCP architecture, MCP servers, clients, tools, prompts, and resources.
Experience identifying AI and MCP-specific security risks.
Experience testing AI Agents, Copilot solutions, Agentic workflows, RAG systems, and LLM integrations.
Knowledge of OWASP Top 10 for LLM Applications and AI Security best practices.

Application Security
Web Application Security Testing.
Mobile Application Security Testing (Android/iOS).
API Security Testing.
Secure Code Review.
Threat Modeling and Risk Assessment.
Authentication, Authorization, SSO, OAuth2, OpenID Connect, SAML.

Security Tools
Burp Suite Enterprise/Qualified.
OWASP ZAP.
MobSF. Appknox
Snyk, Checkmarx, Veracode, Fortify or equivalent SAST tools.
Postman, Swagger.
SIEM and vulnerability management platforms.

Security Standards
OWASP Top 10.
OWASP API Security Top 10.
OWASP Mobile Top 10.
OWASP LLM Top 10.
NIST Secure Development Framework.
PCI-DSS, SOC2, ISO 27001 awareness.

📌 Security Testing Engineer Pune (India)
🏢 Zensar
📍 India