Application Security Engineer

Tata Consultancy Services Limited; Delhi; On-site; INR 1,200,000 - 2,200,000; Full time

Job summary

Tata Consultancy Services Limited is seeking an Application Security professional in Delhi/Noida with 4–10 years of hands‑on experience. The role involves manual testing of web apps and APIs, using Burp Suite, Postman, and related tools to identify security issues.

You will create test cases, analyze findings, and work with development teams to remediate vulnerabilities. Strong knowledge of OWASP Top 10 and API security is essential.

Qualifications

• 4-10 years of experience in application security.
• Experience in manual testing of web applications and APIs.
• Knowledge of OWASP Top 10, API Security Top 10 and business logic risks.

Responsibilities

• Perform vulnerability assessment and manual penetration testing for web applications, APIs, and application components.
• Create security test cases based on application functionality, threat scenarios and risk frameworks.
• Use security tools such as Burp Suite, OWASP ZAP, Fortify, Nessus, Acunetix, Postman for scanning and validation.
• Analyze scan results, validate true positives, identify false positives, and prepare clear vulnerability reports.
• Work with development teams to explain vulnerabilities, recommend remediation steps, and perform retesting after fixes.
• Knowledge of SAST, DAST, API security testing, dependency scanning, and vulnerability management processes.

Skills

Manual Penetration Testing

Vulnerability Assessment

Threat Modeling

Security Reporting

Tools

Burp Suite

Postman

OWASP ZAP

Fortify

Nessus

Acunetix

Job description

Role: Application Security

Required Technical Skill Set: Postman, Burpsuit, API security and Mobile security, Must have hands on experiance in doing manual PT of the application

Desired Experience Range: 4-10 years

Location of Requirement: Delhi/Noida

Desired Competencies (Technical/Behavioral Competency)

• . Perform vulnerability assessment and manual penetration testing for web applications, APIs, and application components.
• Create security test cases based on application functionality, threat scenarios, OWASP Top 10, API Security Top 10, and business logic risks.
• Use security tools such as Burp Suite, OWASP ZAP, Fortify, Nessus, Acunetix, Postman, and similar tools for scanning and validation.
• Analyze scan results, validate true positives, identify false positives, and prepare clear technical vulnerability reports.
• Work with development teams to explain vulnerabilities, recommend remediation steps, and perform retesting after fixes.
• Knowledge of SAST, DAST, API security testing, dependency scanning, and vulnerability management processes.