Security Test Engineer - Ethical Hacking

Description :Position - Test Engineer (Ethical Hacking)Overall/Total Experience : 5 to 7 years onlyLocation : DelhiWorking Days : 5 Days from officeNotice Period Requirement : 30 Days (Maximum)Company Size : Startup / Small EnterpriseRole & Responsibilities :- 5 plus years of experience, hands-on experience in penetration testing and application security across web portals, mobile apps, and APIs with focus on transaction-intensive platforms.- Proven track record of identifying and remediating critical vulnerabilities in at least 1 Govt/PSU project or equivalent audit.- Familiarity with e-procurement/financial system fraud paerns (bid manipulation, price tampering).- Strong skills in session/token security, replay attack testing, API penetration, and fraud simulation.- Proven expertise in simulating fraud scenarios to identify how buyers/sellers may attempt to manipulate procurement workflows e.g., bid rigging, price tampering, replay attacks, fake approvals, or bypassing maker-checker controls.- Track record of identifying and helping remediate critical vulnerabilities in at least one Government/PSU or equivalent highscale procurement/financial system.- Strong skills in authentication, session/token security, API penetration, input manipulation, and fraud simulation, with ability to highlight business impact of each exploit (financial loss, unfair deal awards, reputational risk).- Deep understanding of e procurement/ marketplace fraud patterns (e.g., forged bids, multi-account collusion, transaction replay, audit trail manipulation).- Proficient in advanced security tools such as Burp Suite, OWASP ZAP, Kali Linux, Metasploit, combined with custom scripting for attack simulation.Ideal Candidate :- Strong Application Security / Penetration Testing Profiles- Must have 5+ years of total experience, out of which minimum 3 years should be specifically in Penetration Testing / Vulnerability Assessment.- Must have strong hands-on experience in business logic testing and fraud simulation, including scenarios such as bid manipulation, price tampering, replay attacks, fake approvals, and maker-checker bypass.- Proficiency in advanced security testing tools such as Burp Suite, OWASP ZAP, Kali Linux, Metasploit, and ability to perform custom attack scripting.- Strong expertise in authentication, session/token security, API penetration, input manipulation, and fraud simulation, with the ability to highlight the business impact of each exploit.- Bachelors in Engineering/IT (B.Tech/BE) or MCA.- At least one advanced security credential : OSCP, OSWE, CEH Practical, or CREST. (ref:hirist.tech)