Dynamic Application Security Testing

Cloudxtreme; Hyderabad, Bengaluru, Delhi; Hybrid; INR 1,500,000 - 3,500,000; Full time

Job summary

Cloudxtreme is seeking a CyberSecurity Specialist with 7–11 years of experience in Threat and Vulnerability Management. The role focuses on web services testing, DAST triage, and remediation coordination in a hybrid day-shift model.

The ideal candidate will have strong knowledge of CVSS scoring, programming basics, SQL/DB concepts, and familiarity with Burp Suite and Postman. Join a dynamic team to safeguard digital assets and users.

Qualifications

• Experience in application security and threat/vulnerability management.
• Familiar with DAST, CVSS scoring and risk prioritization.
• Hands-on with web services testing and API security.

Responsibilities

• Perform DAST triage and vulnerability assessment for running applications.
• Analyze scan results, prioritize findings, and recommend remediation.
• Support remediation tracking and verify resolutions with Dev teams.
• Ensure compliance with security policies for web and API apps.
• Document findings and contribute to knowledge base for developers.

Skills

TVM expertise

DAST & vulnerability assessment

CVSS risk scoring

Programming basics

SQL & DB concepts

Web APIs & HTTP basics

Tools

Burp Suite

Postman

DAST tools

Job description

Role & responsibilities

We are seeking a dedicated CyberSecurity Specialist with expertise in Threat and Vulnerability Management (TVM) to join our team. The ideal candidate will have 7 to 11 years of experience in cybersecurity, focusing on web services testing and security practices. This role involves working in a hybrid model with day shifts, ensuring the security of our digital assets and contributing to the safety of our users.

Responsibilities

• DAST Triage and Vulnerability Assessment Review and triage dynamic application security testing DAST scan results identify, prioritize, and validate vulnerabilities in running applications using CVSS scoring and risk frameworks to determine business impact and recommend remediation strategies False Positive Management Assess and validate false positives from DAST scans using tools such as Burp Suite and Postman working with development teams to understand their application document findings and maintain accuracy of vulnerability data Remediation Support Work with development teams to identify and implement fixes for DAST identified vulnerabilities track remediation efforts and verify resolutions Policy Compliance Support enforcement of application security policies ensure compliance with security requirements for web and API applications Documentation Create vulnerability assessments remediation guidance and knowledge base articles for development teams based on DAST findings processes and identified best practices Tool Management Assist in managing and optimizing enterprise DAST tool maintain tool hygiene and data quality DevOps Integration Support integration of DAST tools within CICD pipelines assist with security gate implementation for DAST testing Cross functional Collaboration Partner with developers DevOps and security teams to embed dynamic testing practices into the SDLC Reporting and Metrics Track and report on DAST vulnerability metrics remediation status and security trends 2 4 years of experience in application security software development or DevOps Strong knowledge of Dynamic Application Security Testing DAST tools and runtime vulnerability management Understanding of vulnerability assessment and prioritization CVSS risk scoring Proficiency in at least one programming language Python Go JavaScript Java or similar Familiarity with SQL and database concepts including querying data manipulation data dashboarding and visualization Familiarity with web application and API fundamentals including HTTP methods error codes request response structures authentication authorization web traffic analysis and the use of browser developer tools eg network tab Experience with vulnerability databases NVD CVE GitHub Advisory or similar Basic understanding of CI CD pipelines and DevOps practices Strong analytical and problem solving skills Excellent written and verbal communication skills Ability to work cross functionally with development and operations teams

Certifications Required

- Experience with additional security scanning tools (SAST, DAST, container scanning) - Knowledge of compliance frameworks (OWASP, CWE, CVSS, SLSA) - Relevant certifications in app security testing