Application Security / VAPT Engineer – Web & API Security

BlueBox Infosoft Pvt. Ltd.; Vadodara; Vor Ort; INR 600.000 - 1.000.000; Vollzeit

Zusammenfassung

BlueBox Infosoft Pvt. Ltd. in Vadodara, Gujarat seeks an Application Security / VAPT Engineer to perform hands-on security testing of Web Applications and APIs and identify vulnerabilities, security gaps and business-logic loopholes.

The role requires 2+ years in Application Security or Penetration Testing, with strong knowledge of OWASP Top 10 and hands-on with Burp Suite, OWASP ZAP, Postman, and Nmap. You will collaborate with developers on fixes and security retesting.

Qualifikationen

• 2+ years in Application Security, VAPT or Penetration Testing.
• Strong knowledge of Web & API Security / OWASP Top 10.
• Hands-on with Burp Suite, OWASP ZAP, Postman, Nmap or similar tools.
• Strong analytical and attacker mindset.

Aufgaben

• Perform manual & automated VAPT of Web Applications and APIs.
• Identify vulnerabilities such as OWASP Top 10, IDOR/BOLA, XSS, SQL Injection, CSRF, Broken Access Control.
• Test authentication, authorization, sessions, APIs and business logic.
• Perform security testing beyond automated scanners.
• Document vulnerabilities with impact, evidence, severity and remediation.
• Work with developers on root-cause analysis, fixes and security retesting.

Kenntnisse

Attacker mindset

Analytical skills

Tools

Burp Suite

OWASP ZAP

Postman

Nmap

Jobbeschreibung

Location: Vadodara, Gujarat
Work Mode: Full-Time | Work From Office
Experience: 2+ Years

About the Role

We are looking for an Application Security / VAPT Engineer to perform hands-on security testing of Web Applications and APIs and identify vulnerabilities, security gaps and business-logic loopholes.

Key Responsibilities

• Perform manual & automated VAPT of Web Applications and APIs.
• Identify vulnerabilities such as OWASP Top 10, IDOR/BOLA, XSS, SQL Injection, CSRF, Broken Access Control and API security issues.
• Test authentication, authorization, sessions, APIs and business logic.
• Perform security testing beyond automated scanners.
• Document vulnerabilities with impact, evidence, severity and remediation.
• Work with developers on root-cause analysis, fixes and security retesting.

Requirements

• 2+ years in Application Security, VAPT or Penetration Testing.
• Strong knowledge of Web & API Security / OWASP Top 10.
• Hands-on with Burp Suite, OWASP ZAP, Postman, Nmap or similar tools.
• Strong analytical and attacker mindset.

Preferred

• Software developers who have transitioned into Application Security / VAPT are encouraged to apply.
• Strong experience in manual Web/API and business-logic testing.

Ideal Profile:
VAPT + Web/API Security + Manual Testing + Code Understanding + Security Mindset