Security Testing Engineer (Software & Cloud )

Landis+Gyr EMEA; Dadri; On-site; INR 1,200,000 - 2,400,000; Full time

Job summary

Landis+Gyr EMEA is seeking a Security Testing Engineer (Software & Cloud) to ensure our SaaS platforms and cloud-backed services are secure, compliant, and resilient across multi-tenant environments.

You will plan and execute security tests, validate SAST/DAST and container scans in CI/CD, review cloud configurations (GCP IAM, networking) and provide remediation guidance to development teams.

Qualifications

• 4+ years in application or cloud security testing in SaaS or industrial/energy environments.
• Deep knowledge of OWASP Top 10 and API Security Top 10.
• Solid understanding of cloud platforms (e.g., GCP), IAM, networking and policy enforcement.

Responsibilities

• Plan, execute, and document application and cloud security tests, including API, web, and service-level penetration tests.
• Validate the effectiveness of SAST, DAST, and container scanning in CI/CD pipelines and ensure issues are triaged and resolved.
• Assess authentication, authorization, and session management in web and mobile apps.
• Review cloud configurations and deployments (e.g., GCP) for compliance with security baselines.
• Simulate attack scenarios to evaluate resilience of multi-tenant cloud services.
• Work with R&D to define secure deployment and monitoring controls for production environments.
• Provide remediation guidance to development teams and verify fixes through retesting.
• Support audits and certifications with test evidence and reports.

Skills

OWASP Top 10

API Security Top 10

Cloud security

Attack path chaining

CI/CD security

Tools

SAST

DAST

Container scanning

CI/CD pipelines

Job description

Landis+Gyr EMEA, formerly part of the Landis+Gyr Group, supports electricity, gas, water and thermal utilities in managing increasingly complex networks, improving operational efficiency and enabling more sustainable use of resources.

With more than 2.800 employees in 19 countries and decades of experience in critical infrastructure technology, the company provides advanced metering, network intelligence and digital solutions to utilities and infrastructure operators primarily across Europe, Middle East and Africa. As a standalone organisation, Landis+Gyr EMEA builds on long-standing customer relationships and proven technology capabilities, backed by experienced regional teams.

Role Purpose

The Security Testing Engineer (Software & Cloud) ensures that Landis+Gyr’s EMEA software and cloud-based solutions are secure, compliant, and resilient. This role focuses on identifying, reproducing, and verifying vulnerabilities across SaaS platforms, backend APIs, web applications, and cloud infrastructure, while working closely with DevSecOps and R&D teams to integrate testing into the CI/CD process.

Key Responsibilities

• Plan, execute, and document application and cloud security tests, including API, web, and service-level penetration tests.
• Validate the effectiveness of SAST, DAST, and container scanning in CI/CD pipelines and ensure detected issues are triaged and resolved.
• Assess authentication, authorization, and session management mechanisms in web and mobile applications.
• Review cloud configurations and deployments (e.g., GCP, etc.) for compliance with best practices and internal security baselines.
• Simulate attack scenarios to evaluate resilience of multi-tenant cloud services and identify weak points in integration layers.
• Work with R&D to define secure deployment and monitoring controls for production environments.
• Provide remediation guidance to development teams and verify fixes through structured retesting.
• Support audits and certifications (e.g., CSTAR, ISO 27017, IEC 62443, CRA) with test evidence and reports.

Required Skills & Experience

• 4+ years of experience in application or cloud security testing, ideally in SaaS or industrial/energy environments.
• Deep knowledge of OWASP Top 10, API Security Top 10, and modern cloud security risks.
• Solid understanding of cloud platforms (e.g., GCP), including IAM, networking, and policy enforcement.
• Ability to chain low‑severity findings into meaningful attack paths

We value and encourage diversity in our team.

This position is open to all qualified candidates regardless of gender, race, age, disability, sexual orientation, or background.

We're committed to shaping a better future for everyone. #EnergizeYourCareer and join us on our journey towards a greener tomorrow.