- Application Security Engineer / Application Security Consultant

Experience: 5-10 Years

Location: Jaipur location preferred

Role Type: Full Time

Key Responsibilities

- Perform SAST (Static Application Security Testing) and DAST (Energetic Application Security Testing) to identify and remediate application vulnerabilities.
- Conduct application penetration testing for web, mobile, and API-based applications.
- Assess applications for common security vulnerabilities such as:
- Cross-Site Scripting (XSS)
- Cross-Site Request Forgery (CSRF)
- SQL Injection
- Insecure Direct Object References (IDOR)
- URL Manipulation/Hacking
- Information Exposure and Sensitive Data Leaks

- Review security findings and work with development teams to drive remediation activities.
- Conduct API security testing using Postman and other API testing tools.
- Validate authentication and authorization controls, including MFA, SSO, and Identity Access Management workflows.
- Support secure SDLC initiatives and application security best practices.
- Prepare vulnerability assessment reports and provide risk-based recommendations.

Required Skills





- Strong hands-on experience in Application Security, Vulnerability Assessment, and Penetration Testing (VAPT).
- Experience with SAST/DAST tools, preferably Rapid7 or equivalent security platforms.
- Good understanding of OWASP Top 10 vulnerabilities and remediation techniques.
- Experience in web application, API, and security testing methodologies.
- Hands-on experience with Postman for API validation and security testing.
- Strong knowledge of authentication, authorization, and session management mechanisms.

Good to Have
- Experience with Fuzz Testing.
- End-to-end testing of MFA, Authentication, and SSO integrations.
- Security certifications such as CEH, OSCP, GWAPT, CSSLP, or Security+.
- Experience integrating security tools within CI/CD pipelines.

Qualifications

- Bachelor's degree in Computer Science, Information Security, or related field.
- Strong analytical, troubleshooting, and communication skills.
- Ability to collaborate with development, DevOps, and security teams to improve application security posture.

Security Testing

📌 TEST MODULE LEAD - Security Testing (Noida)
🏢 Happiest Minds Technologies
📍 Noida