Quality Assurance - Security Tester

Key Responsibilities

• Conduct Vulnerability Assessment and Penetration Testing (VAPT) for web, mobile, API, and network environments.
• Perform API Security Testing (REST, SOAP, GraphQL).
• Execute Network and Infrastructure Penetration Testing.
• Conduct Mobile Application Security Testing (Android/iOS).
• Identify and validate vulnerabilities such as OWASP Top 10, SQL Injection (SQLi), Cross-Site Scripting (XSS), Cross-Site Request Forgery (CSRF), Server-Side Request Forgery (SSRF), Authentication & Authorization Flaws, and Business Logic Vulnerabilities.

Required Skills

• Strong knowledge of OWASP Top 10.
• Hands-on experience with Burp Suite and OWASP ZAP.
• Good understanding of Web Security, API Security, and Network Security.
• Experience working in Linux environments.
• Knowledge of authentication protocols such as OAuth, JWT, and SAML.

Preferred Certifications

• OSCP
• CPTS
• ISTQB Security Testing