Security Tester – Application & Cloud Security

About the role

We are looking for a Security Tester to lead application and cloud security testing across web, mobile, micro‑services and serverless environments. You will work closely with engineering teams to identify vulnerabilities, validate remediations and embed security into the development lifecycle.

Key responsibilities

• Perform manual and automated security testing of web, mobile, API and micro‑frontend applications.
• Execute black‑box, grey‑box and white‑box penetration tests, focusing on OWASP Top 10, API security, authentication, session management and business‑logic flaws.
• Validate the security of cloud‑hosted environments, including IAM, secrets management, network security groups, Kubernetes, containers and serverless functions.
• Integrate security testing into CI/CD pipelines (SAST, DAST, SCA, container image scanning, secret scanning, IaC scanning).
• Manage vulnerability lifecycle: verify findings, eliminate false positives, prioritize by CVSS, track remediation and conduct regression testing.
• Support compliance initiatives (ISO 27001, SOC 2, GDPR) and provide evidence during audits.
• Develop automation scripts for vulnerability validation, API fuzzing and security reporting.

Required profile

• Bachelor’s degree in Computer Science, Information Security or related field.
• 4–8 years of experience in application security or security testing.
• Strong understanding of OWASP Top 10, API Security Top 10, OAuth2, OpenID Connect, JWT and cryptography fundamentals.
• Hands‑on experience with penetration‑testing tools and security scanners.

Required skills

• Python, Java, C#, JavaScript
• Burp Suite Professional, OWASP ZAP, Postman, Nmap, Metasploit, Nessus, Nikto, SQLMap, MobSF
• SonarQube, Snyk, Checkmarx, Veracode
• Kubernetes, Docker, Terraform, GitHub Advanced Security, CodeQL
• SAST, DAST, SCA, container image scanning, secret scanning, IaC scanning

What we offer

• Opportunity to work on cutting‑edge security projects across cloud and AI/LLM domains.
• Collaboration with cross‑functional engineering teams.
• Continuous learning and professional development support.