Senior Security Testing Consultant

Lennox International; Chennai District; On-site; INR 2,500,000 - 4,000,000; Full time

Job summary

Lennox International is seeking a highly skilled Senior Security Specialist (IC3) in Chennai to lead application security across web, mobile, and API platforms. You will perform DAST, API and MAST testing, and guide secure SDLC practices with DevOps teams.

You will assess vulnerabilities, validate controls, and contribute to AI security risk management, staying current with OWASP Top 10 and emerging threats in enterprise environments.

Qualifications

• 6-9 years of experience in Application Security or Security Testing (VAPT).
• Strong understanding of web, mobile and API security principles.
• Experience collaborating with development and DevOps teams to fix security issues across the SDLC.

Responsibilities

• Perform end-to-end application security assessments for web, mobile, and API applications.
• Validate security controls and identify vulnerabilities using manual and automated techniques.
• Support security gates within CI/CD pipelines and participate in security reviews.

Skills

DAST

API Security Testing

MAST

AI Security Testing

VAPT

Education

Bachelor's degree in Computer Science / Cyber Security / Information Technology

Job description

Lennox (NYSE: LII) Driven by 130 years of legacy, HVAC and refrigeration success, Lennox provides our residential and commercial customers with industry-leading climate-control solutions. At Lennox, we win as a team, aiming for excellence and delivering innovative, sustainable products and services. Lennox is a global community that values each team member's contributions and offers a supportive environment for career development.

We are seeking a highly skilled Senior Security Specialist (IC3) with 6-9 years of experience in Application Security & Penetration Testing (VAPT), and security testing methodologies. The ideal candidate should possess strong expertise in DAST, API Security Testing, Mobile Application Security Testing (MAST) , and hands-on exposure to AI-driven security testing and AI security risks . This role will work closely with development, DevOps, architecture, and product teams to identify, assess, and remediate security vulnerabilities throughout the SDLC.

Application Security

• Perform end-to-end application security assessments for web, mobile, and API applications.
• Validate security controls and identify vulnerabilities using manual and automated techniques.

DAST (Dynamic Application Security Testing)

API Security

• Perform API security testing against REST, SOAP, GraphQL, and Microservices architectures.
• Validate API security controls including:
• JWT Security
• Conduct testing aligned with:
• OWASP API Security Top 10
• OWASP Testing Guide

Mobile Application Security Testing (MAST)

• Perform Android and iOS application security assessments.
• Conduct dynamic mobile application testing.
• Assess data storage, encryption, certificate pinning, and API security implementations.
• Use security tools such as:

VAPT Activities

• Conduct vulnerability assessments and penetration tests.

AI Security & Emerging Technologies

• Assess security risks associated with AI/LLM-powered applications.
• Data Leakage Risks
• OWASP Top 10 for LLM Applications
• GenAI Security Best Practices
• Utilize AI-assisted security testing tools to improve assessment efficiency.

• Collaborate with development and DevOps teams.
• Support security gates within CI/CD pipelines.
• Participate in security reviews and release approvals.

Bachelor's degree in computer science, Cyber Security, Information Technology, or a related field.

6-9 years of experience in Application Security, VAPT, or Security Testing.Strong understanding of web, mobile, and API security principles.Experience interacting with development and architecture teams. .