Security Expert

VOLKSWAGEN GROUP DIGITAL SOLUTIONS PRIVATE LIMITED; Pune District, Gurugram District, Bengaluru; On-site; INR 900,000 - 1,200,000; Full time

Job summary

VOLKSWAGEN GROUP DIGITAL SOLUTIONS PRIVATE LIMITED is seeking a security professional to conduct in-depth penetration testing of web applications, using both manual techniques and automated tools to uncover vulnerabilities. You'll identify issues from OWASP Top 10, perform threat modeling and risk assessments, and collaborate with development teams to remediate findings and enforce secure coding practices.

You'll produce detailed, risk‑based reports and contribute to IT security governance and

Qualifications

• In-depth web app penetration testing using manual and automated tools.
• Identify and document vulnerabilities such as SQL injection, XSS, CSRF, auth flaws, and business logic issues.
• Perform threat modeling and risk assessments for web-based applications.
• Collaborate with development teams to provide remediation strategies and secure coding practices.
• Prepare detailed reports outlining findings, risk levels, and mitigations.
• Provide technical oversight in IT security and vulnerability management and compliance.

Responsibilities

• Conduct in-depth penetration testing of web applications using both manual techniques and automated tools.
• Identify, exploit, and document vulnerabilities such as SQL injection, XSS, CSRF, authentication flaws, and business logic issues.
• Perform threat modeling and risk assessments for web-based applications.
• Collaborate with development teams to provide remediation strategies and secure coding practices.
• Prepare detailed reports outlining findings, risk levels, and mitigation recommendations
• Provide technical oversight in IT security and vulnerability management.

Skills

Web Application Penetration Testing

OWASP Top 10

Manual Vulnerability Assessment

API Security Testing (REST, GraphQL)

Threat Modeling

Risk Assessment

Authentication Session Management

Scripting (Python, Bash, etc.)

Reporting Documentation

IT Security and Vulnerability

Security Standards (ISO, NIST)

Job description

Key Responsibilities

• Conduct in-depth penetration testing of web applications using both manual techniques and automated tools. 60
• Identify, exploit, and document vulnerabilities such as SQL injection, XSS, CSRF, authentication flaws, and business logic issues. 10
• Perform threat modeling and risk assessments for web-based applications. 10
• Collaborate with development teams to provide remediation strategies and secure coding practices. 10
• Prepare detailed reports outlining findings, risk levels, and mitigation recommendations 10
• Provide technical oversight in IT security and vulnerability management. 10

Skills / Competencies Technical Skills / Competencies

• Web Application Penetration Testing
• OWASP Top 10
• Manual Vulnerability Assessment
• API Security Testing (REST, GraphQL)

Functional Skills / Competencies

• Threat Modeling
• Risk Assessment
• Authentication Session Management Testing
• Scripting (Python, Bash, etc.)
• Reporting Documentation
• IT Security and Vulnerability Management
• Security Standards Compliance (ISO, NIST)