Security Tester Pr

Softtek; India; On-site; INR 800,000 - 1,200,000; Full time

Job summary

Softtek in India is seeking a Security Tester PR to assess API security, perform authentication tests, and validate token-based and key-based access controls across REST and GraphQL services. The role also involves TLS considerations, log analysis, and evidence-based reporting.

You will collaborate with developers to remediate findings and support customer security sign-off, ensuring robust security before deployment.

Qualifications

• Experience testing REST and GraphQL APIs for security.
• Knowledge of OAuth2 and API keys for access control.
• Ability to analyze logs and produce technical reports.

Responsibilities

• Validate security controls in connectors and platform integrations.
• Verify authentication and authorization across APIs and services.
• Execute security-focused testing against REST and GraphQL APIs.
• Assess transport security configurations (TLS, certificates).
• Validate secure handling of credentials and tokens.
• Review logs to verify credential masking and secure error handling.
• Produce security reports and remediation recommendations.
• Support final solution security sign-off activities.

Skills

API security testing

Authentication testing

OAuth testing

Bearer tokens

TLS fundamentals

Python scripting

Web service security

Log analysis

Job description

Security Tester PR

Requirements

• API Security Testing (REST and GraphQL).


• Authentication and Authorization testing.


• Bearer Token, OAuth, API Key validation.


• HTTP/HTTPS and TLS fundamentals.


• Python scripting for test automation and validation.


• Security assessment of web services and APIs.


• Vulnerability validation and risk assessment.


• Log analysis and troubleshooting.


• Creation of test evidence and technical reports.

Responsibilities

• Validate security controls implemented in connectors and platform integrations.


• Verify authentication and authorization mechanisms across APIs and services.


• Execute security-focused testing against REST and GraphQL APIs.


• Assess transport security configurations (TLS, certificates, encryption settings).


• Validate secure handling of credentials, secrets, and tokens.


• Review application logs to verify credential masking and secure error handling.


• Execute vulnerability assessments against integration components and exposed services.


• Collaborate with developers to analyze and remediate security findings.


• Validate compliance with security requirements defined by customer specifications.


• Produce technical security reports and remediation recommendations.


• Support final solution security sign-off activities.

Location: India, Mexico

Languages: English advanced