Security Testing Engineer

Required Skills

MCP & AI Security

• Strong hands-on experience in MCP (Model Context Protocol) Security Testing.
• Understanding of MCP architecture, MCP servers, clients, tools, prompts, and resources.
• Experience identifying AI and MCP-specific security risks.
• Experience testing AI Agents, Copilot solutions, Agentic workflows, RAG systems, and LLM integrations.
• Knowledge of OWASP Top 10 for LLM Applications and AI Security best practices.

Application Security

• Web Application Security Testing.
• Mobile Application Security Testing (Android/iOS).
• API Security Testing.
• Secure Code Review.
• Threat Modeling and Risk Assessment.
• Authentication, Authorization, SSO, OAuth2, OpenID Connect, SAML.

Security Tools

• Burp Suite Enterprise/Professional.
• OWASP ZAP.
• MobSF. Appknox
• Snyk, Checkmarx, Veracode, Fortify or equivalent SAST tools.
• Postman, Swagger.
• SIEM and vulnerability management platforms.

Security Standards

• OWASP Top 10.
• OWASP API Security Top 10.
• OWASP Mobile Top 10.
• OWASP LLM Top 10.
• NIST Secure Development Framework.
• PCI-DSS, SOC2, ISO 27001 awareness.