THIS IS A FULL TIME, CONTRACTUAL ROLE FOR 6 MONTHS, REMOTE WITH THE POSSIBILITIES

Please apply only if you are comfortable with contractual role

Job title - Sr. Application security tester

Location - India - Remote

Years of exp(Req.) - 8+

Role Overview

We are seeking an experienced Non-Functional Test Lead to drive the planning, execution, and governance of all non-functional testing activities for a strategic greenfield banking application development program . The candidate will be responsible for leading Security Testing activities across the software delivery lifecycle, ensuring that solutions are scalable, secure, resilient, and production-ready.

The ideal candidate will possess strong banking domain knowledge, extensive experience in non-functional testing, and the ability to collaborate with cross-functional teams including architects, developers, infrastructure teams, security teams, and business stakeholders.

Key Responsibilities

- Define and lead the security testing strategy, approach, governance, and release readiness criteria.
- Plan and execute Vulnerability Assessment and Penetration Testing (VAPT), SAST, DAST, API Security Testing, and Infrastructure Security Testing.
- Identify, assess, prioritize, and track security vulnerabilities through remediation and closure.
- Work closely with development, architecture, infrastructure,



and cybersecurity teams to ensure secure-by-design implementation.
- Validate compliance with banking security standards, regulatory requirements, and enterprise security policies.
- Assess application, API, cloud, and infrastructure security risks and provide mitigation recommendations.
- Provide security test reports, risk assessments, and go-live recommendations to stakeholders.
- Support integration of security testing within Agile and DevSecOps delivery pipelines.
- Leverage banking domain expertise to ensure secure handling of financial transactions, customer data, and regulatory controls.

Required Skills & Experience

- 8+ years of testing experience with robust expertise in Security Testing.
- Hands-on experience in VAPT, SAST, DAST, API Security, and Cloud Security Testing.
- Knowledge of security tools such as Burp Suite, OWASP ZAP, Checkmarx, Fortify, Veracode, or similar.
- Strong understanding of OWASP Top 10, secure coding practices, and DevSecOps.
- Experience in banking or financial services environments with knowledge of regulatory and security compliance requirements.
- Relevant certifications such as CEH, Security+, CISSP, or equivalent are preferred.

Interested candidates can also drop their CVs to - [email protected]

📌 Senior Application Security Engineer (India)
🏢 Solvex Solutions
📍 India