Sr. Security Test Engineer

Sr. Security Test Engineer
Location- Remote
Key Responsibilities
Perform application penetration testing, with focus on authentication and session management.
Develop abuse cases, security scenarios, and automated end-to-end journeys.
Lead security testing for regulated, customer-facing systems, including traceability and evidence management.
Support UAT, security workshops, defect management, and stakeholder engagement.
Execute functional, regression, performance, accessibility, and security testing.
Design and execute passcode/OTP security tests, including entropy, randomness, concurrency, timing, and telemetry validation.
Required Skills & Experience
6+ years in application penetration testing or security test engineering.
4+ years hands-on functional, regression, performance, and accessibility testing.
OSCP, GWAPT, CREST, or equivalent demonstrable experience.
Strong Burp Suite Professional skills (Repeater, Intruder, Sequencer, Comparer, macros/session handling), plus OWASP ZAP and ffuf/wfuzz.
Experience with Playwright/Selenium, C#/Java/TypeScript and API automation using REST Assured/RestSharp.
Experience with xUnit/NUnit/JUnit 5/TestNG and Page Object or equivalent frameworks.
Automated email/passcode validation using MailHog, Mailtrap, smtp4dev, or provider APIs/IMAP.
Performance testing using JMeter, k6, or Gatling, including correlation, parameterisation, think-time and volume-profile modelling.
Accessibility testing using axe, WAVE/Lighthouse, NVDA/JAWS/VoiceOver, with strong WCAG 2.2 AA knowledge.
Experience with Azure DevOps Test Plans, Xray, Zephyr, or TestRail, including requirements traceability and defect management.
Scripting skills in Python or JavaScript/TypeScript, plus Bash or PowerShell.
Strong knowledge of OWASP WSTG (ATHN/SESS), OWASP ASVS, and WCAG 2.2 AA.

Work arrangement
Yes