Senior Application Security Engineer

**THIS IS A FULL TIME, CONTRACTUAL ROLE FOR 6 MONTHS, REMOTE WITH THE POSSIBILITIES**

Please apply only if you are comfortable with contractual role

Job title - Sr. Application security tester

Location - India - Remote

Years of exp(Req.) - 8+

Role Overview

We are seeking an experienced Non-Functional Test Lead to drive the planning, execution, and governance of all non-functional testing activities for a strategic greenfield banking application development program . The candidate will be responsible for leading Security Testing activities across the software delivery lifecycle, ensuring that solutions are scalable, secure, resilient, and production-ready.

The ideal candidate will possess strong banking domain knowledge, extensive experience in non-functional testing, and the ability to collaborate with cross-functional teams including architects, developers, infrastructure teams, security teams, and business stakeholders.

Key Responsibilities

• Define and lead the security testing strategy, approach, governance, and release readiness criteria.
• Plan and execute Vulnerability Assessment and Penetration Testing (VAPT), SAST, DAST, API Security Testing, and Infrastructure Security Testing.
• Identify, assess, prioritize, and track security vulnerabilities through remediation and closure.
• Work closely with development, architecture, infrastructure, and cybersecurity teams to ensure secure-by-design implementation.
• Validate compliance with banking security standards, regulatory requirements, and enterprise security policies.
• Assess application, API, cloud, and infrastructure security risks and provide mitigation recommendations.
• Provide security test reports, risk assessments, and go-live recommendations to stakeholders.
• Support integration of security testing within Agile and DevSecOps delivery pipelines.
• Leverage banking domain expertise to ensure secure handling of financial transactions, customer data, and regulatory controls.

Required Skills & Experience

• 8+ years of testing experience with strong expertise in Security Testing.
• Hands-on experience in VAPT, SAST, DAST, API Security, and Cloud Security Testing.
• Knowledge of security tools such as Burp Suite, OWASP ZAP, Checkmarx, Fortify, Veracode, or similar.
• Strong understanding of OWASP Top 10, secure coding practices, and DevSecOps.
• Experience in banking or financial services environments with knowledge of regulatory and security compliance requirements.
• Relevant certifications such as CEH, Security+, CISSP, or equivalent are preferred.

Interested candidates can also drop their CVs to - [email protected]