Security Testing Engineer Software And Cloud

Landis+Gyr; Dadri; On-site; INR 1,200,000 - 2,100,000; Full time

Job summary

Landis+Gyr EMEA is seeking a Security Testing Engineer (Software & Cloud) to ensure our SaaS and cloud-based solutions are secure, compliant, and resilient across web applications, APIs, and cloud infrastructure.

You will plan and execute security tests, validate SAST/DAST, review cloud deployments (GCP), and collaborate with DevSecOps and R&D to integrate testing into CI/CD pipelines. Strong hands-on security experience is required.

Qualifications

• 4+ years in application or cloud security testing in SaaS or industrial environments.
• Strong knowledge of OWASP Top 10 and API Security Top 10.
• Experience securing cloud platforms (GCP) and IAM, networking, and policy enforcement.

Responsibilities

• Plan, execute, and document security tests for applications and cloud services, including API and web tests.
• Validate SAST, DAST, and container scanning within CI/CD and ensure issues are triaged.
• Assess authentication, authorization, and session management in web and mobile apps.
• Review cloud configurations (GCP) for compliance with security baselines.
• Simulate attacks to test resilience of multi-tenant cloud services and integrations.
• Collaborate with R&D to define secure deployment and monitoring controls.
• Provide remediation guidance and verify fixes with retesting.
• Support audits and certifications with test evidence and reports.

Skills

OWASP Top 10

API Security Top 10

Cloud security

GCP IAM

Vulnerability remediation

Tools

GCP

CI/CD pipelines

Job description

Job Description:

Landis+Gyr EMEA, formerly part of the Landis+Gyr Group, supports electricity,gas,waterand thermal utilities in managing increasingly complex networks, improving operational efficiency and enabling more sustainable use of resources.

With more than 2.800 employees in 19 countries and decades of experience in critical infrastructure technology, the company providesadvancedmetering,networkintelligenceand digitalsolutionstoutilities and infrastructure operators primarilyacross Europe,MiddleEastand Africa. As a standaloneorganisation, Landis+Gyr EMEAbuildson long-standing customer relationships and proven technology capabilities,backedby experienced regional teams.

Role Purpose

The Security Testing Engineer (Software & Cloud) ensures thatLandis+Gyr’sEMEAsoftware and cloud-based solutions are secure, compliant, and resilient.This role focuses onidentifying, reproducing, and verifying vulnerabilities across SaaS platforms, backend APIs, web applications, and cloud infrastructure, while working closely withDevSecOpsand R&D teams to integrate testing into the CI/CD process.

Key Responsibilities

• Plan, execute, and document application and cloud security tests, including API, web, and service-level penetration tests.
• Validate the effectiveness of SAST, DAST, and container scanning in CI/CD pipelines and ensure detected issues are triaged and resolved.
• Assess authentication, authorization, and session management mechanisms in web and mobile applications.
• Review cloud configurations and deployments (e.g., GCP, etc.) for compliance with best practices and internal security baselines.
• Simulate attack scenarios to evaluateresilienceof multi-tenant cloud services and identify weak points in integration layers.
• Work with R&D to define secure deployment and monitoring controls for production environments.
• Provide remediation guidance to development teams and verify fixes through structured retesting.
• Support audits and certifications (e.g., CSTAR, ISO 27017, IEC 62443, CRA) with test evidence and reports.

Required Skills & Experience

• 4+ years of experience in application or cloud security testing, ideally in SaaS or industrial/energy environments.
• Deep knowledge of OWASP Top 10, API Security Top 10, and modern cloud security risks.
• Solid understanding of cloud platforms (e.g., GCP), including IAM, networking, and policy enforcement.
• Ability to chain low-severity findings into meaningful attack paths

We value and encourage diversity in our team. This position is open to all qualified candidates regardless of gender, race, age, disability, sexual orientation, or background.Were committed to shaping a better future for everyone. #EnergizeYourCareer and join us on our journey towards a greener tomorrow.

Requirements: