Job highlights

- Role Type: Full Time

- Conduct API security testing using Postman and other API testing tools. . Validate authentication and authorization controls,including MFA,SSO,and Identity Access Management workflows. . Support secure SDLC initiatives and application security best practices.

- Location: Jaipur location preferred

- Experience: 5-10 Years

- Application Security Engineer / Application Security Consultant

Experience: 5-10 Years

Location: Jaipur location preferred

Role Type: Full Time

Key Responsibilities

- Perform SAST (Static Application Security Testing) and DAST (Dynamic Application Security Testing) to identify and remediate application vulnerabilities.

- Conduct application penetration testing for web, mobile, and API-based applications.

- Assess applications for common security vulnerabilities such as:

- Cross-Site Scripting (XSS)

- Cross-Site Request Forgery (CSRF)

- SQL Injection

- Insecure Direct Object References (IDOR)

- URL Manipulation/Hacking

- Information Exposure and Sensitive Data Leaks

- Review security findings and work with development teams to drive remediation activities.

- Conduct API security testing using Postman and other API testing tools.

- Validate authentication and authorization controls, including MFA, SSO, and Identity Access Management workflows.

- Support secure SDLC initiatives and application security best practices.





- Prepare vulnerability assessment reports and provide risk-based recommendations.

Required Skills

- Strong hands-on experience in Application Security, Vulnerability Assessment, and Penetration Testing (VAPT).

- Experience with SAST/DAST tools, preferably Rapid7 or equivalent security platforms.

- Positive understanding of OWASP Top 10 vulnerabilities and remediation techniques.

- Experience in web application, API, and security testing methodologies.

- Hands-on experience with Postman for API validation and security testing.

- Strong knowledge of authentication, authorization, and session management mechanisms.

Good to Have

- Experience with Fuzz Testing.

- End-to-end testing of MFA, Authentication, and SSO integrations.

- Security certifications such as CEH, OSCP, GWAPT, CSSLP, or Security+.

- Experience integrating security tools within CI/CD pipelines.

Qualifications

- Bachelors degree in Computer Science, Information Security, or related field.

- Strong analytical, troubleshooting, and communication skills.

- Ability to collaborate with development, DevOps, and security teams to improve application security posture.

This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

📌 TEST MODULE LEAD - Security Testing (Noida)
🏢 Happiest Minds Technologies
📍 Noida