Application Testing:QA Tester II

VMC Soft Technologies, Inc; Hyderabad; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

VMC Soft Technologies, Inc. is seeking an experienced penetration testing engineer focused on application security testing.

You will conduct security assessments across web applications and APIs, performing code reviews and leveraging SAST/DAST tools to reduce false positives. You will also drive secure SDLC practices, integrate security checks into CI/CD pipelines, and stay current on OWASP Top 10 and cloud security principles.

Qualifications

• Hands-on experience conducting penetration testing across diverse Web-applications & APIs.
• Strong ability to read and perform code review from security perspective (Java, JavaScript, Python, etc.).
• Experience with SAST and DAST automated vulnerability assessment tools and false-positive analysis.

Responsibilities

• Conduct penetration testing across diverse Web-applications & APIs using Burp Suite.
• Perform code reviews from security perspective in multiple languages (Java, JavaScript, Python).
• Integrate security checks into CI/CD pipelines and automate security testing.

Skills

Penetration testing

Application security testing

Burp Suite

SAST/DAST/IAST

OWASP Top 10

Code review

CI/CD security

Cloud security / container security

Tools

Burp Suite

Job description

Skill

Penetration testing engineer/ Application security testing engineer

Skill

Penetration testing engineer/ Application security testing engineer

Exp

min 8+ Years and above only and not less

Jd

• Application security testing engineer, new requirement
• Hands-on experience conducting penetration testing across diverse Web-applications & APIs using Burp suite
• Strong programming and scripting skills with ability to read and perform code review from security perspective (Java, JavaScript, Python, etc.)
• Experience with SAST and DAST automated vulnerability assessment tools and False-positive analysis of the report.
• Strong knowledge of OWASP TOP 10, related causes and remediation techniques.
• Programming/scripting skills, and ability to read and audit various programming languages, (Java, JavaScript, Python etc)
• Practical experience of integrating and automating security checks into CI/CD pipeline and Conduct penetration testing against a wide variety of technologies
• Strong knowledge of network security, encryption protocols, access control, and identity management
• Ability to conduct security assessments, vulnerability scans, and penetration tests
• Hands-on experience in security technologies and tools, including SAST, IAST and DAST
• Experience with cloud security principles and technologies, including container security
• Familiarity with security incident response and root cause analysis
• Knowledge of software development lifecycle (SDLC) security practices
• Experience with security audits, compliance assessments, and remediation efforts
• Primary location:
• Bangalore and across other apple locations in india