Security Testing Engineer

Allied Boston Consultants India; Sector 10; On-site; INR 900,000 - 1,300,000; Full time

Job summary

Allied Boston Consultants India is seeking a Security Test Engineer with hands-on exposure to Application Security and Network Security Testing. The role involves performing VAPT across web applications, APIs, mobile apps and IT infrastructure, validating vulnerabilities, and supporting client-facing security reports.

The position requires 2-5 years of experience, with proficiency in Burp Suite, Nmap, Nessus, OWASP ZAP, Metasploit and Wireshark, and knowledge of OWASP Top 10 and CVSS.

Qualifications

• 12 years of experience in VAPT, Application Security or Network Security Testing.
• Strong understanding of common web, API and network vulnerabilities.
• Hands-on knowledge of Burp Suite, Nmap, Nessus, OWASP ZAP, Wireshark and Metasploit.
• Understanding of SAST, DAST, OWASP Top 10, CVSS and vulnerability lifecycle.
• Good analytical, documentation and communication skills.

Responsibilities

• Perform Web Application, API, Mobile and Network VAPT.
• Conduct manual and automated vulnerability assessments using Burp Suite, Nmap, Nessus, OWASP ZAP, Metasploit and Wireshark.
• Identify and validate vulnerabilities per OWASP Top 10, CWE/SANS Top 25 and NIST SP 800-115.
• Perform network security testing including port/service enumeration and configuration review.
• Validate findings, eliminate false positives and assign CVSS risk ratings.
• Prepare test cases, proof-of-concept evidence, and vulnerability reports.
• Remediate and retest, supporting closure of vulnerabilities.
• Maintain accurate testing evidence and documentation for QA/audit.

Skills

VAPT

Application Security

Network Security Testing

Burp Suite

Nmap

Nessus

OWASP ZAP

Metasploit

Wireshark

CVSS

CWE/SANS Top 25

NIST SP 800-115

Education

B.Tech/B.E./B.Sc./BCA or equivalent in Computer Science, IT, Cybersecurity or related field

Tools

Burp Suite

Nmap

Nessus

OWASP ZAP

Metasploit

Wireshark

Job description

Security Test Engineer Application & Network Security

Location: Noida / Bengaluru / Mumbai
Experience: 2-5 Years
Employment: Full-time | Work from Office | Client-site travel as required

Role Summary:

We are looking for a Security Test Engineer with hands-on exposure to Application Security and Network Security Testing. The role involves performing VAPT across web applications, APIs, mobile applications and IT infrastructure, validating vulnerabilities, preparing evidence, and supporting client-facing security reports.

Key Responsibilities

• Perform Web Application, API, Mobile and Network VAPT.
• Conduct manual and automated vulnerability assessments using tools such as Burp Suite, Nmap, Nessus, OWASP ZAP, Metasploit and Wireshark.
• Identify and validate vulnerabilities based on OWASP Top 10, CWE/SANS Top 25 and NIST SP 800-115.
• Perform network security testing, including port/service enumeration, vulnerability assessment, configuration review and exploitation validation.
• Validate findings, eliminate false positives and assign appropriate CVSS risk ratings.
• Prepare test cases, proof-of-concept evidence and clear vulnerability reports.
• Perform remediation retesting and support closure of identified vulnerabilities.
• Maintain accurate testing evidence and documentation in line with quality and audit requirements.

Required Skills

• 12 years of experience in VAPT, Application Security or Network Security Testing.
• Strong understanding of common web, API and network vulnerabilities.
• Hands‑on knowledge of Burp Suite, Nmap, Nessus, OWASP ZAP, Wireshark and Metasploit.
• Understanding of SAST, DAST, OWASP Top 10, CVSS and vulnerability lifecycle.
• Good analytical, documentation and communication skills.

Qualification:

B.Tech/B.E./B.Sc./BCA or equivalent in Computer Science, IT, Cybersecurity or related field.

Preferred Certifications:

CEH / eJPT / Security+ / OSCP / CCNA.