Security Testing Engineer

We are seeking a highly skilled Automation & Security Test Engineer with 3+ years of experience in test automation and application security testing. The ideal candidate should possess strong expertise in Selenium Automation using Java or C#, test framework development, CI/CD integration, and security testing methodologies including vulnerability assessment and DAST. Experience in secure application testing and quality engineering practices is highly desirable

Key Responsibilities

Automation Testing

• Design, develop, and maintain automation frameworks using Selenium WebDriver with Java or C#.
• Develop and execute automated test scripts for Web, API, and Enterprise applications.
• Build reusable automation libraries and utilities.
• Integrate automation suites with CI/CD pipelines.
• Perform regression, smoke, sanity, and functional testing using automated frameworks.
• Analyze test results and provide detailed defect reports.
• Collaborate with developers, business analysts, and QA teams to ensure quality deliverables.
• Participate in test planning, estimation, and test strategy discussions.

Security Testing

• Perform comprehensive Security Testing and Assessment activities across applications, APIs, cloud environments, and supporting infrastructure.
• Execute Dynamic Application Security Testing (DAST), Vulnerability Assessments, and Security Validation activities using industry-standard tools and methodologies.
• Conduct manual and automated security testing to identify vulnerabilities related to authentication, authorization, session management, encryption, access controls, and business logic flaws.
• Assess applications against industry standards and frameworks such as OWASP Top 10, OWASP API Security Top 10, CWE, NIST, and SANS.
• Identify, analyze, prioritize, and document security vulnerabilities with detailed risk ratings, business impact analysis, and remediation guidance.
• Perform false-positive analysis, vulnerability validation, and retesting to verify remediation effectiveness.
• Collaborate closely with Development, Architecture, QA, and DevSecOps teams to promote secure coding practices and integrate security into the Software Development Life Cycle (SDLC).
• Perform security reviews, threat assessments, and risk-based security evaluations for new and existing applications.