03 Nov
|
Client of HiringFlow
|
Bengaluru
03 Nov
Client of HiringFlow
Bengaluru
Client of Hiringflow is hiring for Automation QAE - Security in Bangalore location. This is onsite role and office location is electronic city.
Key Responsibilities Test Management & Functional Assurance: ● Design, execute, and maintain structured test plans, test cases, and traceability matrices using Jira + Xray Test Manager. ● Validate functional requirements, API endpoints, and business logic across modern web/mobile applications. Static & Security Analysis (SAST): ● Integrate and manage Semgrep rulesets within our CI/CD pipeline for static code analysis and taint tracking (tracing untrusted user inputs to sensitive sinks). ● Work closely with developers to triage false positives and provide actionable remediation guidance for flagged code.
Energetic Application Security & Pen-Test Simulation (DAST): ● Perform automated and semi-automated DAST scans using OWASP ZAP (Zed Attack Proxy) to simulate external attacks. ● Conduct targeted manual security checks for logic flaws, broken access control (IDOR), SQLi, XSS, and authentication bypasses that automated tools miss.
Pen-Test Clearing & Remediation: ● Validate and re-test vulnerabilities identified during third-party penetration audits to ensure complete resolution before production deployments. ● Maintain a live dashboard of security bugs, CVSS scores, and remediation statuses in Jira. Required Skills & Qualifications Hands-on Tooling Experience: ● Xray for Jira: Demonstrated experience mapping test execution, bug reports, and requirements in Xray. ● Static Analysis: Familiarity with Semgrep (writing or tweaking custom YAML rules for taint analysis is a huge plus). ● Dynamic Scanning: Practical expertise with OWASP ZAP (automated spidering, active scanning, and inter-capturing proxy usage) or Burp Suite.
Pay: ₹600,000.00 - ₹750,000.00 per year
Experience:
- Automation testing in security: 1 year (Required)
Location:
- Bangalore City, Bengaluru, Karnataka (Required)
Work Location: In person
📌 QA Automation Engineer - Security (Bengaluru)
🏢 Client of HiringFlow
📍 Bengaluru