Security Analyst - API Security

About the role

Perform Dynamic Application Security Testing (DAST) on APIs and web applications using both manual and automated methods. Analyze DAST scan results, identify and prioritize vulnerabilities based on risk. Participate in triage sessions with application teams to explain and document vulnerabilities. Conduct deep API security testing (REST, SOAP, GraphQL) to uncover issues like BOLA, logic flaws, and abuse scenarios.

What you'll do

• Perform Dynamic Application Security Testing (DAST) on APIs and web applications using both manual and automated methods
• Analyze DAST scan results, identify and prioritize vulnerabilities based on risk
• Participate in triage sessions with application teams to explain and document vulnerabilities
• Conduct deep API security testing (REST, SOAP, GraphQL) to uncover issues like BOLA, logic flaws, and abuse scenarios
• Perform red teaming, adversary emulation, and use offensive security tools (if applicable)

What you need

• 5–7 yrs of experience
• Linux
• Penetration testing
• GraphQL
• Test cases
• HTML
• JavaScript
• Any graduate

Good to have

• .NET
• SQL
• Java
• IoT
• HVAC
• AC repair