QA Tester- Vulnerability and Security Testing at Gurugram Full Time

Job Overview:

We are seeking a skilled QA Tester with a strong background in Vulnerability Testing to ensure the security, functionality, and reliability of our applications. The ideal candidate will have experience in penetration testing, security testing methodologies, load testing, automation, and working with compliance standards.

Key Responsibilities:

• Develop and execute test cases, scripts, and security test plans for applications and APIs.
• Perform vulnerability assessments and penetration testing on web, mobile, and cloud-based applications.
• Identify security loopholes, conduct risk analysis, and provide actionable remediation recommendations.
• Collaborate with development and DevOps teams to ensure secure coding practices.
• Automate security testing and integrate into CI/CD pipelines.
• Test applications against OWASP Top 10 vulnerabilities (e.g., SQL Injection, XSS, CSRF, SSRF).
• Utilize tools such as Burp Suite, OWASP ZAP, Metasploit, Kali Linux, Nessus, etc.
• Conduct API security testing and validate authentication & authorization mechanisms.
• Document security vulnerabilities and collaborate for timely remediation.
• Ensure compliance with industry standards like ISO 27001, GDPR, HIPAA, PCI-DSS, where applicable.

Required Skills & Qualifications:

• 3+ years of experience in Quality Assurance, with a strong focus on Security & Vulnerability Testing.
• In-depth knowledge of penetration testing tools and security frameworks.
• Experience with automated security testing in CI/CD environments (e.g., Jenkins, GitHub Actions, GitLab CI).
• Proficiency in manual and automated testing of web and mobile applications.
• Familiarity with scripting languages such as Python, Bash, or JavaScript for test automation.
• Experience working with cloud platforms like AWS, Azure, or GCP (preferred).
• Strong understanding of HTTP, APIs, and authentication protocols (OAuth, JWT, SAML).
• Good knowledge of network security, firewalls, and IDS/IPS systems.
• Certifications such as CEH, OSCP, CISSP, Security+ are a plus.