QA Tester

We're looking for a QA Tester with strong experience in vulnerability and security testing to ensure secure, reliable, and high-performing applications.
You'll perform penetration testing, automate security validations, and work with Developers/DevOps teams to enforce best security practices.
Responsibilities:
Conduct vulnerability assessments and penetration testing on web, mobile, and cloud applications.
Identify and document security flaws(OWASP Top 10 SQLi, XSS, CSRF, etc. ).
Automate security testing and integrate it into CI/CD pipelines.
Use tools like Burp Suite, ZAP, Metasploit, Kali Linux, and Nessus.
Perform API security testing and validate authentication protocols(OAuth, JWT, SAML).
Ensure compliance with ISO 27001 GDPR, HIPAA, and PCI-DSS.
Requirements:
Mandatory skills: Penetration testing, vulnerability assessment, OWASP Top 10 API security testing, automation in CI/CD, security tools (Burp Suite, ZAP, Metasploit), scripting (Python/Bash/JavaScript), web and mobile security testing, and knowledge of security standards (ISO 27001 GDPR, etc. ).
3+ years in QA with a focus on security testing.
Experience with manual/automated security testing, CI/CD, and cloud platforms.
Proficiency in Python, Bash, or JavaScript scripting.
Understanding of network security, IDS/IPS.
Preferred certifications: CEH, OSCP, CISSP, Security+.

Experience
3-7 yrs