QA - Security Testing

About the Role
We are looking for a detail-oriented QA Engineer – Security Testing with strong application security fundamentals to support a cloud-based security testing product.
The role involves validating web and API vulnerabilities, ensuring accurate vulnerability detection, improving automated security testing capabilities, and collaborating closely with engineering teams to deliver reliable and secure products.

Key Responsibilities
Design, execute, and maintain test cases for web and API security testing features
Validate vulnerability findings, including identifying false positives and false negatives
Perform functional, negative, regression, and stress testing
Analyze test results, debug issues, and collaborate with developers for resolution
Create and maintain test environments simulating real-world attack scenarios
Support automated DAST and security testing workflows
Contribute to improving test coverage, automation, and product reliability
Document test cases, findings, and security validation reports

Required Skills & Experience
1–3 years of experience in application security, security testing, or penetration testing
Strong understanding of common web vulnerabilities including SQL Injection (SQLi), XSS, CSRF, SSRF, etc.
Good knowledge of OWASP Top 10 vulnerabilities and secure testing practices
Hands-on experience with tools such as Burp Suite, Nmap, OWASP ZAP, or similar vulnerability scanners
Basic scripting knowledge (preferably Python)
Familiarity with Linux environments and command-line tools
Strong analytical, debugging, and problem-solving skills
Good communication and collaboration abilities

Nice to Have
Knowledge of network protocols, APIs, and databases
Experience with automated security testing or DAST tools
Familiarity with CI/CD pipelines and DevSecOps practices
Security certifications such as CEH, OSCP, Security+, or equivalent

What We Offer
Opportunity to work on cutting-edge security testing products
Collaborative and learning-focused environment
Exposure to modern cloud and security technologies
Career growth in cybersecurity and product quality engineering