Security Analyst - API Security
ChennaiFull-time5–7 yrsPosted open since jun 2025
Senior cybersecurity role at Lennox International in Chennai. Needs 5–7 years.
About the role
Perform Dynamic Application Security Testing (DAST) on APIs and web applications using both manual and automated methods. Analyze DAST scan results, identify and prioritize vulnerabilities based on risk. Participate in triage sessions with application teams to explain and document vulnerabilities. Conduct deep API security testing (REST, SOAP, GraphQL) to uncover issues like BOLA, logic flaws, and abuse scenarios.
What you'll do
- Perform Dynamic Application Security Testing (DAST) on APIs and web applications using both manual and automated methods
- Analyze DAST scan results, identify and prioritize vulnerabilities based on risk
- Participate in triage sessions with application teams to explain and document vulnerabilities
- Conduct deep API security testing (REST, SOAP, GraphQL) to uncover issues like BOLA, logic flaws, and abuse scenarios
- Perform red teaming, adversary emulation, and use offensive security tools (if applicable)
What you need
- Linux
- Penetration testing
- GraphQL
- Test cases
- HTML
- JavaScript
Good to have
- .NET
- SQL
- Java
- IoT
- HVAC
- AC repair