Role: Application Security

Required Technical Skill Set: Postman, Burpsuit, API security and Mobile security, Must have hands on experiance in doing manual PT of the application

Desired Experience Range: 4-10 years

Location of Requirement: Delhi/Noida

Desired Competencies (Technical/Behavioral Competency)

. Perform vulnerability assessment and manual penetration testing for web applications, APIs, and application components.

• Create security test cases based on application functionality, threat scenarios, OWASP Top 10, API Security Top 10, and business logic risks.

• Use security tools such as Burp Suite, OWASP ZAP, Fortify, Nessus, Acunetix, Postman, and similar tools for scanning and validation.

• Analyze scan results, validate true positives, identify false positives, and prepare explicit technical vulnerability reports.

• Work with development teams to explain vulnerabilities, recommend remediation steps, and perform retesting after fixes.

• Knowledge of SAST, DAST, API security testing, dependency scanning, and vulnerability management processes.

📌 Application Security Engineer (Noida)
🏢 Tata Consultancy Services
📍 Noida