Summary :

The candidate will be responsible for :

- Implement best testing and DevOps practices.

- Application assessment (manual and automation) and further evolution on continuous basis.

- Design/Architect test automation framework and develop the new test automation libraries for application testing and security assessment.

- Collaborate with the teams to discuss, analyze requirements and put low level design.

- Perform code reviews on regular basis.

- Assist team in development of any testing tool for application and its security testing on need basis.

- Collaborate with the team/Project Manager/Scrum Master and Business Analyst to develop effective strategies for testing framework, plans and necessary roadmap.

- Post application security testing a remediation support, review open source components.

- Reviewing application code against the secure coding baseline and practices including top rated OWASP global issues.

- Executing test cases (manual or automated) and analyze results.

- Create logs to document testing phases and defects, reporting and tracking till closure of reported issues.

- Report bugs and errors to development teams including conduct regression testing to sign-off deliverables.

- Conduct post-release/ post-implementation testing including test plan for every version change with impact & risk assessment.

- Work with cross-functional teams to ensure quality throughout the software development lifecycle.

- Mentor team about preparation of test cases as required and have good understanding of test life cycle.

- Participate in various application security assessments, build and improve application security framework, and coordinate with IV&V agencies.

- Identify, classify and find remedy for security non-compliances.

Experience :

- Minimum 10+ years of experience in application testing, security testing or Security Architecture.

- Proven experience as a Software Quality Assurance Tester or similar role.

- Familiarity with Agile frameworks and regression testing is a plus.

- Ability to document and troubleshoot errors.

- Knowledge in Payments Systems and Banking domain is an added advantage.

- Excellent communication skills with analytical mind and problem-solving aptitude.

- Ability to work in all shifts (24/7).

Knowledge :

- Good understanding of the SDLC and STLC.

- Experience in Manual & Automation Testing.

- Understanding of Payment System business, and Scope of security testing within various applications.

- Good knowledge in Testing and Security tools like Burp Suite.

- Good knowledge in Session Management, Authentication, Authorization, Access control, Input Validation, Business logic security testing, Webservices/API security testing.

- Extensive knowledge of OWASP top 10 vulnerabilities.

- Self-driven and ability to work independently with minimal supervision.

- Knowledge of various types of security vulnerabilities.

- Working knowledge in Agile environment.

Tech Stack :

- Web technologies : HTML, httpd, Javascript, AJAX, JSON, XML, DOM.

- API, any IDE, Restful services, Opensource technologies.