AppSec (Manager) | Big4

Acme Services; Navi Mumbai; On-site; INR 900,000 - 1,700,000; Full time

Job summary

Acme Services in Navi Mumbai is seeking a security tester to conduct end-to-end assessments across web, mobile, APIs, cloud, and IoT environments. You will document findings and collaborate with development teams to drive remediation with a focus on strong security fundamentals.

The role requires hands-on experience with BurpSuite, MobSF, proxies, and a solid understanding of OWASP Top 10 vulnerabilities. Prior eCommerce AppSec exposure is a plus and a DevSecOps mindset is essential.

Qualifications

• End-to-end security assessments across web, mobile, APIs, cloud, and IoT environments.
• Secure code reviews and penetration testing to identify vulnerabilities with remediation guidance.
• Collaborate with developers to document findings and ensure secure design and deployment.

Responsibilities

• Conduct comprehensive security assessments across web, mobile, APIs, cloud, and IoT platforms.
• Perform secure code reviews, penetration testing, and security design evaluations with DevSecOps readiness.
• Collaborate with developers for remediation and document findings, adapting to new tech while maintaining security fundamentals.

Tools

BurpSuite Extension

MobSF

OWASP Top 10 Vulnerabilities

Proxies

Job description

• Conduct end-to-end security assessments across diverse platforms includingweb, mobile (Android & IOS), APIs, cloud, IoT, and legacy systems.
• Perform secure code reviews, penetration testing, and security design evaluations with DevSecOps automation readiness.
• Collaborate with developers for remediation, document findings, and adapt quickly to new technologies while maintaining strong security fundamentals.

BurpSuiteExtension

OWASP Top 10Vulnerabilities

MobSf

SQLI

Manual Application Security Testing

Proxies

MobileApps Security

WebApplication Security

In-depth understanding of OWASP Implications & Controls

eCommerce AppSec experience would be added advantage