Automation Testing (Selenium Java/C#) & Security Testing Engineer

Key Responsibilities:

• Carry out end-to-end Security Testing and Assessment across applications, APIs, cloud environments, and supporting infrastructure
• Run Dynamic Application Security Testing (DAST) and Vulnerability Assessments, and perform Security Validation using recognized tools and industry-standard methodologies
• Perform manual and automated security testing to uncover vulnerabilities involving authentication, authorization, session management, encryption, access controls, and business logic flaws
• Evaluate applications against leading industry standards and frameworks including OWASP Top 10, OWASP API Security Top 10, CWE, NIST, and SANS
• Detect, analyze, prioritize, and document security vulnerabilities with detailed risk ratings, business impact analysis, and remediation recommendations
• Conduct false positive analysis, vulnerability validation, and retesting to confirm remediation effectiveness
• Verify the implementation of security controls such as identity and access management, multi-factor authentication, secrets management, data protection, cryptographic controls, and secure communication mechanisms
• Partner with Development, Architecture, QA, and DevSecOps teams to reinforce secure coding practices and embed security throughout the Software Development Life Cycle (SDLC)
• Perform security reviews, threat assessments, and risk-based security evaluations for both new and existing applications
• Support vulnerability management activities, including triage, tracking, risk acceptance reviews, and remediation validation
• Create comprehensive security assessment reports and communicate findings, risks, and recommendations to technical and non-technical stakeholders
• Perform false positive analysis and deliver remediation recommendations
• Validate authentication, authorization, session management, encryption, and access control mechanisms

Technical Requirements:

• 3 years of experience in Application Security Testing, Vulnerability Assessment, and Security Validation
• Strong hands-on experience with DAST tools such as Burp Suite Pro, HCL AppScan, Acunetix, Netsparker, or an equivalent solution
• Working knowledge of Web API and Cloud Security concepts
• Familiarity with OWASP Top 10, OWASP API Security Top 10, CVSS, CWE, and Secure SDLC practices
• Experience producing vulnerability reports, performing risk analysis, supporting remediation validation, and communicating with stakeholders
• Understanding of authentication protocols such as OAuth 2
• 0 OpenID Connect (OIDC), SAML, JWT, and MFA
• Experience with Cloud Security assessments across Azure, AWS, GCP, and container security
• Exposure to SAST, SCA, OSS Security Testing, API Security Testing, and Threat Modeling methodologies

Preferred Skills:

Technology->Mobile Automation Testing->Mobile Test Automation process,Technology->Test Automation->Selenium-Java,Technology->Security Testing->Security Testing