Senior Security Assessor – Web, Mobile & API

About the role

We are looking for an experienced Security Assessor to join our team as an individual contributor. The role focuses on hands‑on security testing of web, mobile and API applications, source‑code review, and intermediate cloud security assessments, primarily for banking‑sector clients.

Key responsibilities

• Perform web application security testing using OWASP Top 10, SANS and other industry standards.
• Conduct mobile application security testing for Android and iOS platforms.
• Evaluate API security for REST, SOAP, GraphQL and micro‑service architectures.
• Execute manual and automated source‑code reviews across multiple languages and frameworks.
• Carry out intermediate cloud security reviews on AWS, Azure and GCP, identifying misconfigurations.
• Perform basic network security assessments and configuration reviews.
• Map technical findings to business impact, apply CVSS and custom risk models, and produce risk‑rated reports.
• Collaborate with development, DevOps and architecture teams to remediate findings and embed security into SDLC/DevSecOps pipelines.

Required profile

• 5–8 years of experience in security assessment, preferably in the banking domain.
• Strong knowledge of web, mobile and API security testing methodologies.
• Ability to work independently with minimal supervision.
• Excellent communication skills to convey technical risks to business stakeholders.

Required skills

• MobSF
• OWASP ZAP
• Checkmarx
• Fortify
• Burp Suite
• Sonarqube
• Postman
• AWS
• Azure
• GCP
• CVSS
• API Security Testing
• Mobile Application Security Testing
• Network Security
• Web Application Security Testing
• Source Code Review