Security Testing Engineer

Security Testing Engineer

Company: Kiya.ai

Work Mode: Hybrid

Interview Mode: 2 rounds (Virtual & F2F is Must)

Kiya.ai is seeking a Security Testing Engineer to join our team in Bangalore. This role is crucial for ensuring the security of our applications through comprehensive penetration testing and adherence to secure development practices.

Direct Responsibilities:

• Perform Penetration testing (Gray Box and/or Black Box) for Web applications, Thick Client, API, and mobile applications.
• Demonstrate deep knowledge of application security engineering principles to follow secure development practices, including secure build processes, secure code review, and security testing.
• Understand the integration and use of security tools within DevOps Processes.
• Possess knowledge of one or more scripting languages for automation.
• Collaborate effectively with developers to help them understand and remediate reported vulnerabilities in applications.

Contributing Responsibilities:

• Understand application security requirements and identify & document the scope of security tests.
• Ensure the thorough execution of documented security scenarios for the application under test.
• Document and report all findings clearly and comprehensively.
• Escalate issues to local management and onshore stakeholders if they affect testing progress.
• Ensure adherence to defined processes for security assessments.
• Help review peers' work and mentor junior members of the team.

Technical & Behavioral Competencies:

• Clear understanding of OWASP Top 10 application security risks.
• Proficiency with security tools/OS such as Burp Suite, OWASP ZAP, and Kali Linux.
• Strong skills in Manual Security Testing & Analysis and Security Test Designing.
• Excellent interpersonal and presentation skills.
• Strong verbal and written communication abilities.
• Good analytical skills.
• Strong time management capabilities.
• Must be flexible, independent, self-motivated, and a team player.