Security Testing Engineer

Security Test Engineer Application & Network Security

Location: Noida / Bengaluru / Mumbai
Experience: 2-5 Years
Employment: Full-time | Work from Office | Client-site travel as required

Role Summary:
We are looking for a Security Test Engineer with hands-on exposure to Application Security and Network Security Testing. The role involves performing VAPT across web applications, APIs, mobile applications and IT infrastructure, validating vulnerabilities, preparing evidence, and supporting client-facing security reports.

Key Responsibilities

• Perform Web Application, API, Mobile and Network VAPT.
• Conduct manual and automated vulnerability assessments using tools such as Burp Suite, Nmap, Nessus, OWASP ZAP, Metasploit and Wireshark.
• Identify and validate vulnerabilities based on OWASP Top 10, CWE/SANS Top 25 and NIST SP 800-115.
• Perform network security testing, including port/service enumeration, vulnerability assessment, configuration review and exploitation validation.
• Validate findings, eliminate false positives and assign appropriate CVSS risk ratings.
• Prepare test cases, proof-of-concept evidence and clear vulnerability reports.
• Perform remediation retesting and support closure of identified vulnerabilities.
• Maintain accurate testing evidence and documentation in line with quality and audit requirements.

Required Skills

• 12 years of experience in VAPT, Application Security or Network Security Testing.
• Strong understanding of common web, API and network vulnerabilities.
• Hands-on knowledge of Burp Suite, Nmap, Nessus, OWASP ZAP, Wireshark and Metasploit.
• Understanding of SAST, DAST, OWASP Top 10, CVSS and vulnerability lifecycle.
• Good analytical, documentation and communication skills.

Qualification: B.Tech/B.E./B.Sc./BCA or equivalent in Computer Science, IT, Cybersecurity or related field.

Preferred Certifications: CEH / eJPT / Security+ / OSCP / CCNA.