Client of Hiringflow is hiring for Automation QAE
- Security in Bangalore location. This is onsite role and office location is electronic city.
Key Responsibilities
Test Management & Functional Assurance: ● Design, execute, and maintain structured test plans, test cases, and traceability matrices using Jira + Xray Test Manager. ● Validate functional requirements, API endpoints, and business logic across contemporary web/mobile applications. Static & Security Analysis (SAST): ● Integrate and manage Semgrep rulesets within our CI/CD pipeline for static code analysis and taint tracking (tracing untrusted user inputs to sensitive sinks). ● Work closely with developers to triage false positives and provide actionable remediation guidance for flagged code. Dynamic Application Security & Pen-Test Simulation (DAST): ● Perform automated and semi-automated DAST scans using OWASP ZAP (Zed Attack Proxy) to simulate external attacks. ● Conduct targeted manual security checks for logic flaws, broken access control (IDOR), SQLi, XSS, and authentication bypasses that automated tools miss.
Pen-Test Clearing & Remediation: ● Validate and re-test vulnerabilities identified during third-party penetration audits to ensure complete resolution before production deployments. ● Maintain a live dashboard of security bugs, CVSS scores, and remediation statuses in Jira. Required Skills & Qualifications Hands-on Tooling
Experience:
● Xray for Jira: Demonstrated experience mapping test execution, bug reports, and requirements in Xray. ● Static Analysis: Familiarity with Semgrep (writing or tweaking custom YAML rules for taint analysis is a huge plus). ● Dynamic Scanning: Practical expertise with OWASP ZAP (automated spidering, active scanning, and inter-capturing proxy usage) or Burp Suite. Pay: ₹600,000.00
- ₹750,000.00 per year
Experience:
- Automation testing in security: 1 year (Required)
Location:
- Bangalore City, Bengaluru, Karnataka (Required) Work