Application Security Consultant – API, Cloud & Application Security

Needed for contractual, remote, support role,

Strictly 10+ years of overall experience,

Can directly DM on (phone hidden),

Tech Stack: API & Microservice Security, Burp Suite Skilled, AWS, REST APIs, OWASP API Top 10, Semgrep, Checkmarx, Veracode, Python, JavaScript, Bash, Nmap.

Role: Perform hands-on security assessments and penetration testing across APIs, microservices, web/mobile applications, and AWS environments. Identify and validate vulnerabilities, conduct static code reviews, assess business impact, and provide actionable remediation recommendations.

Required: 1–3+ years of application security, penetration testing, or related security experience. Strong hands-on API and application testing skills,



especially with Burp Suite Professional. Knowledge of authentication, authorization, BOLA/IDOR, privilege escalation, injection, SSRF, CSRF, XSS, JWT security, and business logic vulnerabilities. Experience with AWS security assessments, SAST tools, vulnerability validation, and security reporting. Working knowledge of Python, JavaScript, or Bash.

Preferred: OWASP ASVS, OWASP Top 10/API Security Top 10, Semgrep, Checkmarx, Veracode, Nmap, mobile application testing, AWS security, and certifications such as OSCP, BSCP, OSWE, or GWAPT.

📌 Application Security Consultant – API, Cloud & Application Security (India)
🏢 Stackzy Technologies
📍 India