Role: Application Security

Required Technical Skill Set: Postman, Burpsuit, API security and Mobile security, Must have hands on experiance in doing manual PT of the application

Desired Experience Range: 4-10 years

Location of Requirement: Delhi/Noida

Desired Competencies (Technical/Behavioral Competency)

. Perform vulnerability assessment and manual penetration testing for web applications, APIs, and application components.

- Create security test cases based on application functionality, threat scenarios, OWASP Top 10, API Security Top 10, and business logic risks.
- Use security tools such as Burp Suite, OWASP ZAP, Fortify, Nessus, Acunetix, Postman, and similar tools for scanning and validation.
- Analyze scan results, validate true positives, identify false positives, and prepare transparent technical vulnerability reports.
- Work with development teams to explain vulnerabilities, recommend remediation steps, and perform retesting after fixes.
- Knowledge of SAST, DAST, API security testing, dependency scanning, and vulnerability management processes.

📌 Application Security Engineer (New Delhi)
🏢 Tata Consultancy Services
📍 New Delhi