Test Engineer - Ethical Hacking

We are looking for a skilled Application Security Engineer / Penetration Tester with strong expertise in web, mobile, and API security, along with hands-on experience in fraud simulation and business logic testing for high-scale, transaction-heavy systems. Role & ResponsibilitiesApplication Security & Penetration TestingPerform penetration testing and vulnerability assessments across web applications, mobile apps, and APIsIdentify, exploit, and help remediate critical security vulnerabilitiesConduct session/token security testing, API penetration, and input manipulation testingUse advanced tools such as Burp Suite, OWASP ZAP, Kali Linux, Metasploit, along with custom scriptsBusiness Logic Testing & Fraud SimulationSimulate real-world fraud scenarios such as bid manipulation, price tampering, replay attacks, and fake approvalsTest business logic vulnerabilities including maker-checker bypass, workflow manipulation, and access control gapsValidate data integrity, concurrency handling, and fail-safe mechanismsHighlight business impact of vulnerabilities (financial loss, unfair transactions, reputational risk)Domain-Specific SecurityAnalyze and test e-procurement and financial systems for fraud patternsIdentify risks like multi-account collusion, forged bids, audit trail manipulation, and transaction replayCollaboration & ReportingWork closely with engineering and product teams to remediate vulnerabilitiesDeliver detailed reports with actionable insights and risk prioritizationEnsure compliance with security standards and best practices Ideal Candidate5+ years of total experience, with 3+ years in Penetration Testing / Application SecurityStrong hands-on experience in business logic testing and fraud simulationExpertise in authentication, session/token security, API testing, and input manipulationProven ability to identify and remediate critical vulnerabilities in large-scale systemsExperience working on Government/PSU or high-scale financial/procurem...