QA Tester – Vulnerability Testing

A BIT ABOUT US

Appknox is one of the top Mobile Application security companies recognized by Gartner and G2. A profitable B2B SaaS startup headquartered in Singapore & working from Bengaluru.

The primary goal of Appknox is to help businesses and mobile developers secure their mobile applications with a focus on delivery speed and high-quality security audits.

Appknox has helped secure mobile apps at Fortune 500 companies with major brands spread across regions like India, South-East Asia, Middle-East, US, and expanding rapidly. We have secured 300+ Enterprises globally.

We are a 65+ incredibly passionate team working to make an impact and helping some of the biggest companies globally. We work in a highly collaborative, very fast-paced work environment. If you have what it takes to be part of the team, we are excited and let’s speak further.

The Opportunity

To join the security team engaging with multiple clients, helping them with end to end security audits, also research about new topics and vulnerabilities to be added to the scanner, present it in conferences.

What An Ideal Candidate Would Look Like: 

• Skills - Application Penetration Testing (Web, iOS and Android), experience with IoT testing, source code audits.
• Technology Stack: AWS, GCP, Objective C, Java, Python
• Responsibilities: Engage with clients for scoping call, perform security audits, remediation call with clients to patch the issues, research on new technologies/vulnerabilities

Minimum Requirements

• 2-4+ years of experience in application security and vulnerability research
• Strong foundation in mobile app security - Android or Ios
• Proven track record of discovering and disclosing CVEs in mobile platforms or popular applications (provide - github/bug bounty profiles)
• Strong understanding of exploit mitigations and proven ability to bypass them
• Should be able to architect automated detection logic for new vulnerabilities and integrate them into our security products
• Develop AI-driven agents to automate dynamic analysis
• Should be able to Leverage AI/LLMs to augment Pentesting efforts
• Ability to work independently in a fast-paced environment, balancing deep research with practical deliverables

Good to have Requirements

• Understanding of AI/ML security risks

Responsibilities

• Security assessment of web/mobile applications on various platforms
• Focusing on Mobile Application Security Research for new vulnerabilities
• Static and Dynamic Code Analysis
• Develop and interpret security standards and guides
• Automation of exploit development 
• Understand and explain the results with impact on business and compliance status
• Continuously learning and training on latest tools and technique

Work Expectations

Within 1 month

Training on processes, security workflows and develop understanding on internal tools.

Within 3 months

Actively contributing in exploit development and automation of it with the team.

Within 6 months

Expected to achieve Subject Matter Expert status on our core security products. We expect you to validate your findings against real-world conditions, with a strong emphasis on translating internal discoveries into actionable bug bounty submissions and earned CVEs to benchmark your impact against the external security community.

Within 1 Year

By the end of your first year, you will be expected to produce and submit a piece of novel, peer-reviewed security research. This deliverable must be of a quality suitable for top-tier industry conferences.

Personality traits we really admire

• A confident and dynamic working persona, which can bring fun to the team, and a sense of humour, is an added advantage.
• Great attitude to ask questions, learn and suggest process improvements.
• Has attention to details and helps identify edge cases.
• Highly motivated and coming up with fresh ideas and perspectives to help us move towards our goals faster.
• Follow timelines and absolute commitment to deadlines.

Interview Process - would be team specific

• Round 1- CTF round 
• Round 2 -Profile Evaluation; HR
• Round 3 -Technical Interview with security team members
• Round 4 -Technical Interview with the Hiring Manager
• Round 5 -Technical round with CTO
• Round 6 -HR Round

Compensation

• As per Industry Standards

Why Join Us

• Freedom & Responsibility: If you are a person who enjoys challenging work & pushing your boundaries, then this is the right place for you. We appreciate new ideas & ownership as well as flexibility with working hours.
• Great Salary & Equity: We keep up with the market standards & provide pay packages considering updated standards. Also as Appknox continues to grow, you’ll have a great opportunity to earn more & grow with us. Moreover, we also provide equity options for our top performers.
• Holistic Growth: We foster a culture of continuous learning and take a much more holistic approach to train and develop our assets: the employees. We shall also support you all on that journey of yours.
• Transparency: Being a part of a start-up is an amazing experience, one of the reasons being open communication & transparency at multiple levels. Working with Appknox will give you the opportunity to experience it all first-hand.

Responsibilities

• Execute and support application vulnerability assessments (SAST, DAST, SCA, and manual code review), ensuring findings are accurate, actionable, and relevant to application risk.
• Validate scanner results, perform false-positive analysis, and track findings through remediation, including retesting to confirm effective fixes.
• Manage multiple application security initiatives concurrently while meeting strict timelines in a fast‑paced environment.
• Prioritize vulnerabilities based on business impact, exploitability, exposure, and likelihood, using industry best practices (e.g., CVSS scoring).
• Develop and maintain dashboards and reports tracking vulnerability metrics such as severity distribution, remediation SLAs, and mean time to remediation (MTTR).
• Support the integration of security scanning and vulnerability workflows into CI/CD pipelines, leveraging existing tooling and automation.
• Facilitate remediation planning by providing actionable recommendations and coordinating root cause analysis.
• Support threat modeling and application risk assessments, with a focus on discovering insecure design patterns.
• Participate in high‑severity or zero‑day vulnerability response activities, including impact analysis and coordinated remediation efforts, as needed.
• Provide input into policies and standards related to application and cloud security controls.

Qualifications and Education Requirements

• Bachelor’s degree in information technology, Cybersecurity, Computer Science, or related discipline—or equivalent professional experience.
• 5-7 years of relevant experience in application security and/or vulnerability management.
• Solid understanding of common vulnerability classes (e.g., OWASP Top 10) and secure architecture principles.
• Proficiency in using Burp Suite for manual security testing of web applications and APIs, including validation of automated findings and identification of complex authentication, authorization, and business‑logic vulnerabilities.
• Hands-on experience with tools such as Burp Suite, Fortify, Checkmarx, SonarQube, Black Duck, Tenable, and common network discovery tools (e.g., Nmap).
• Familiarity with NIST, MITRE ATT&CK, and CIS benchmarks.
• Programming/scripting proficiency in languages such as Python, Java, .NET, or similar.
• Excellent documentation, communication, and stakeholder engagement skills.

Desired Skills

• Professional certifications (e.g., Security+, SSCP, GWAPT, or pursuing CISSP, OSCP).
• Experience using the ServiceNow platform for vulnerability or incident tracking.
• Proficiency in Azure cloud and Azure DevOps environments.
• Experience using Power BI or similar tools to visualize vulnerability metrics and remediation trends for technical and non-technical stakeholders.

Cybersecurity Engineer – AI Training Project

About the Opportunity

We’re looking for experienced Cybersecurity Engineers to contribute technical expertise to a customer project focused on improving the capabilities of next-generation AI systems.

In this role, you’ll use your real-world experience in cybersecurity, software engineering, vulnerability assessment, and secure development to create high-quality technical inputs that help AI systems better understand, debug, secure, and reason about complex software.

What You’ll Do

• Analyze, debug, and resolve software bugs, vulnerabilities, and security issues across complex codebases.
• Review source code and identify potential security weaknesses, vulnerabilities, and attack vectors.
• Perform security assessments, vulnerability assessments, penetration testing, and codebase audits.
• Develop and modify software using languages such as Python, Java, Rust, Go, C++, or TypeScript.
• Implement new features and fix existing functionality while maintaining strong security and engineering standards.
• Refactor legacy code to improve security, maintainability, reliability, and performance.
• Work on backend systems and help optimize applications for scalability, performance, and security.
• Analyze real-world security scenarios and translate your expertise into high-quality technical examples and problem-solving tasks.
• Document technical findings, vulnerabilities, debugging approaches, and recommended solutions.
• Provide domain expertise that helps improve how AI systems reason about software engineering and cybersecurity problems.

What We’re Looking For

• Strong professional experience in Cybersecurity / Application Security / Product Security / DevSecOps / Penetration Testing / Vulnerability Management.
• Strong programming experience in one or more of:
• Python
• Java
• Rust
• Go
• C++
• TypeScript
• Proven experience with debugging, troubleshooting, and fixing complex software issues.
• Hands-on experience with penetration testing, vulnerability assessment, security auditing, or application security.
• Understanding of secure software development practices and modern security threats.
• Strong knowledge of data structures, algorithms, software architecture, and code quality.
• Ability to review unfamiliar codebases and quickly understand how systems work.
• Strong written communication and the ability to explain complex technical findings clearly.

Nice to Have

• Experience with OWASP, API security, cloud security, DevSecOps, or threat modeling.
• Experience performing security assessments on production applications or enterprise systems.
• Experience with tools such as Burp Suite, Metasploit, Nmap, Wireshark, SAST/DAST tools, or vulnerability scanners.
• Contributions to open-source security or software projects.
• Experience working with AI/ML systems, LLMs, data annotation, or AI training projects.
• Relevant security certifications such as OSCP, OSWE, CEH, CISSP, Security+, or equivalent practical experience.

Engagement

• Role: Cybersecurity Engineer
• Work: Remote(Contract)
• Experience: Mid-level to Senior
• Programming: Required
• Cybersecurity expertise: Required

Why Join?

This is an opportunity to apply your existing cybersecurity expertise to an emerging area of technology. Your practical experience debugging software, identifying vulnerabilities, securing applications, and solving complex engineering problems will directly contribute to improving the capabilities of next-generation AI systems.

If you enjoy breaking down complex technical problems, finding vulnerabilities, fixing software, and thinking deeply about how systems work, this project could be a strong fit.

About the team

SecurITe’s mission is to build an Agentic‑AI driven security platform that protects critical infrastructure from modern cyber threats. Our focus is on delivering highly performant, resilient, and intelligent network security systems that help defenders stay ahead of adversaries.

About the Role

We’re looking for a seasoned Senior Quality Engineer to provide technical leadership and architectural oversight for our next‑generation cybersecurity AI platform. In this high-impact role, you will define the technical strategy for quality assurance, ensuring our agentic AI transforms cyber defense with unparalleled reliability.

You will be responsible for the end-to-end quality lifecycle, from architectural reviews to the deployment of scalable automation frameworks. Beyond technical execution, you will serve as a mentor to junior team members, fostering a culture of technical excellence and driving the strategy that ensures our solutions meet the rigorous demands of critical infrastructure protection.

What You’ll Do

●    Defining and driving comprehensive QA strategies and roadmaps for the cybersecurity platform.

●    Designing, developing, and executing test plans, test cases, and automated scripts to ensure software quality.

●    Performing functional, regression, performance, scalability and security testing to identify bugs or defects.

●    Collaborating with developers, product managers, and other stakeholders to understand product requirements and testing needs.

●    Identifying, documenting, and tracking software defects, ensuring clear communication of issues and their resolutions.

●    Leading deep-dive root-cause analysis for critical system defects and security vulnerabilities.

●    Conducting thorough reviews of product specifications and software design to identify potential areas of concern before testing.

●    Architecting and designing complex, scalable test automation frameworks to optimize CI/CD velocity.

●    Ensuring the software meets customer and business requirements by validating the functionality and performance.

●    Assisting in continuously improving QA processes, tools, and best practices to enhance software testing efficiency and effectiveness.

●    Supporting user acceptance testing (UAT) and assisting clients with product validation.

●    Mentoring junior and mid-level engineers, providing technical guidance and conducting architectural reviews.

Required Experience

●    A Bachelor’s degree in Computer Science, Information Technology, Computer Engineering, or a related field.

●    8-10 years of proven experience in quality engineering, specifically within network cybersecurity, Identity Providers, or AI-integrated platforms.

●    Expertise in manual and automated testing.

●    Deep domain expertise in complex system validation and advanced automation practices at scale.

●    Proficiency in programming languages like Python to build and run automated test scripts.

●    "Strong knowledge of software testing methodologies, performance testing tools (e.g., JMeter, k6), and security traffic generation/simulation tools (e.g., Ixia BreakingPoint, Scapy, or Snort/Suricata traffic generators)."

●    Understanding of continuous integration/continuous deployment (CI/CD) pipelines and version control systems like Git.

●    Strong communication skills for documenting test results and interacting with cross-functional teams.

●    Excellent analytical skills, attention to detail, and problem-solving ability.

●    Ability to work independently as well as collaboratively in a team environment.

●    A curious mindset with a willingness to quickly learn new technologies and testing tools.

Required Skills & Qualifications

●    Familiarity with cloud-based testing environments (GCP, AWS, Azure).

●    Experience with cybersecurity products or cloud services or IDP or Web UI

The Mindset

●    Problem Solver: You thrive on complex, ambiguous challenges and engineer elegant solutions.

●    Ownership‑Driven: You take initiative, move fast, and deliver outcomes without hand‑holding.

●    Continuous Learner: You stay ahead of the curve in AI, ML, and emerging technologies.

●    Startup DNA: You excel in fast‑moving environments where priorities evolve and impact is immediate.

We are currently looking for a QA Engineer (3+ years of experience) to join our team. The ideal candidate should have strong experience in Python-based testing and mobile automation for Android and iOS using Appium. In this role, you will be responsible for ensuring product quality through automated and manual testing, identifying bugs, and collaborating with cross-functional teams to deliver high-quality applications.

Key Responsibilities:

• Design, develop, and execute test cases for web and mobile applications
• Perform automation testing using Python and PyTest
• Develop and maintain mobile automation scripts for Android and iOS using Appium
• Identify, log, and track bugs, and work closely with developers for resolution
• Perform regression, functional, and integration testing
• Participate in requirement analysis and test planning
• Improve test frameworks and automation coverage
• Ensure timely delivery of high-quality releases

Required Skills:

• 3+ years of experience in QA/testing
• Strong experience in Python testing
• Hands-on experience with PyTest
• Experience in Android & iOS automation testing
• Hands-on experience with Appium
• Understanding of SDLC/STLC and Agile methodology
• Good debugging and analytical skills
• Strong communication and teamwork skills

Preferred Skills:

• Experience with CI/CD tools
• API testing knowledge
• Experience with test management and bug tracking tools

Senior QA Engineer

Make quality part of the engineering system.

AbleCredit builds software for complex enterprise workflows where AI, APIs, business rules, human decisions, and real-world operations have to work together reliably. We care about building products that work in production - not just in demos. We're looking for a senior quality engineer who can move quality upstream: from release-time testing to better automation, contracts, observability, and engineering practices.

What You'll Own?

• Own quality strategy across web, mobile, backend APIs, integrations, and end-to-end workflows.

• Design and maintain automated regression suites for critical customer journeys.

• Build API, integration, contract, and workflow tests that catch failures before production.

• Partner with engineering and product teams during design - not only after development is complete.

• Define release readiness, risk-based testing, and production validation practices.

• Investigate escaped defects, identify systemic causes, and drive preventive improvements.

• Improve test data, environments, tooling, and CI integration so teams can ship confidently.

What We're Looking For?

• 5+ years in software quality engineering or test automation.

• Strong API and backend testing experience, including asynchronous and integration-heavy systems.

• Experience testing mobile and web applications and understanding client/ server failure modes.

• Ability to write automation in JavaScript/ TypeScript, Python, Java, or a similar language.

• Strong debugging skills across logs, network requests, databases, and distributed services.

• Experience with CI/CD and integrating automated tests into release pipelines.

• A product mindset: prioritize risk and customer impact rather than maximizing test-case counts.

Nice to Have

• Performance, load, security, or reliability testing.

• Experience with Playwright, Cypress, Appium, Postman/ Newman, k6, or similar tooling.

• Experience with event-driven systems, queues, webhooks, and long running workflows.

• Experience testing AI-assisted or non-deterministic product behavior.

How We Think About Quality?

Quality is an engineering responsibility. Automation should create confidence, not dashboards. A production escape should improve the system that allowed it to happen. The goal is simple: ship quickly without making customers our test environment.

Job Summary

We are looking for a detail-oriented QA Tester to join our technology team and ensure the quality, reliability, security, and performance of our FinTech products. The ideal candidate will have experience in manual and API testing, strong analytical skills, and an understanding of financial transactions, payment systems, and digital banking workflows.

The candidate will work closely with developers, business analysts, product managers, and other stakeholders to identify defects, validate business requirements, and deliver a seamless and secure user experience.

Key Responsibilities1. Functional and Manual Testing

• Analyze business requirements, functional specifications, and user stories.
• Prepare and execute test plans, test scenarios, and detailed test cases.
• Perform functional, regression, smoke, sanity, integration, and end-to-end testing.
• Validate web and mobile applications across different browsers, devices, and environments.
• Identify, document, track, and retest defects using tools such as Jira or similar platforms.
• Ensure product functionality aligns with business requirements and acceptance criteria.

2. FinTech and Financial Transaction Testing

• Test financial workflows such as fund transfers, payments, refunds, settlements, and transaction reversals.
• Validate transaction statuses, balances, fees, commissions, and applicable limits.
• Verify transaction accuracy, duplicate transaction prevention, and idempotency.
• Test failed, pending, successful, timed-out, and reversed transactions.
• Validate transaction histories, statements, reconciliation reports, and audit trails.
• Test edge cases involving insufficient balances, concurrent transactions, network failures, and partial failures.
• Verify role-based access, maker-checker approvals, and transaction authorization wherever applicable.

3. API Testing

• Perform REST API testing using Postman or similar tools.
• Validate request and response payloads, status codes, headers, authentication, and error handling.
• Test API integrations with payment gateways, banking systems, third-party service providers, and internal services.
• Validate data consistency across APIs, databases, and user interfaces.
• Test negative scenarios, boundary conditions, rate limits, retries, and timeout handling.

4. Database Testing

• Write SQL queries to validate data integrity and transaction records.
• Verify database entries against application behavior and API responses.
• Test data consistency, constraints, duplicate records, and transaction updates.
• Validate financial calculations and reconciliation data.

5. Automation Testing

• Develop and maintain automated test scripts using Selenium, Playwright, Cypress, or similar frameworks, where applicable.
• Automate repetitive functional and regression test cases.
• Integrate automated tests into CI/CD pipelines in collaboration with development teams.
• Analyze test execution results and troubleshoot failures.

6. Security and Performance Testing

• Support testing of authentication, authorization, session management, and access controls.
• Validate sensitive data masking and secure handling of financial information.
• Identify potential security vulnerabilities and coordinate with security teams.
• Assist with performance and load testing for transaction-heavy workflows using tools such as JMeter or similar platforms.

7. Documentation and Collaboration

• Maintain test documentation, defect reports, execution reports, and test evidence.
• Participate in sprint planning, requirement reviews, daily stand-ups, and retrospectives.
• Collaborate with cross-functional teams to resolve defects and improve product quality.
• Provide QA sign-off based on test results, defect severity, and release acceptance criteria.

Required Skills and Qualifications

• Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field.
• 2–5 years of experience in software quality assurance or testing.
• Strong knowledge of manual testing concepts and software testing life cycle (STLC).
• Hands-on experience with test case design, defect lifecycle, and regression testing.
• Experience in API testing using Postman or similar tools.
• Basic to intermediate SQL knowledge.
• Understanding of web applications, client-server architecture, and REST APIs.
• Good analytical, problem-solving, communication, and documentation skills.
• Familiarity with Agile/Scrum methodologies and tools such as Jira.

Preferred Qualifications

• Experience in FinTech, digital payments, banking, lending, wallets, or financial services.
• Knowledge of UPI, IMPS, NEFT, RTGS, card payments, payment gateways, or similar payment systems, depending on the product.
• Experience with Selenium, Playwright, Cypress, or another automation framework.
• Familiarity with CI/CD tools and performance testing.
• Awareness of PCI DSS, KYC/AML requirements, data privacy, and financial compliance controls, as relevant to the product.

Key Performance Indicators (KPIs)

• Test coverage of business-critical requirements.
• Defect detection rate and defect leakage to production.
• Test execution efficiency and regression coverage.
• Accuracy of financial transaction validation.
• Timely completion of testing within release timelines.
• Effectiveness and reliability of automated test suites.
• Reduction in recurring production defects.

What We Offer

• Opportunity to work on innovative FinTech products.
• Collaborative and fast-paced work environment.
• Opportunities for technical learning and professional growth.
• Exposure to financial systems, payment integrations, and modern QA practices.

SDET – Software Development Engineer in Test

Experience: 2–5 Years

Location: Bangalore / Gurugram

Employment Type: Full-Time

Mandatory Skills

• 2–5 years of relevant experience in SDET / QA Automation / Software Testing.
• Strong hands-on experience in:
• Functional Testing
• API Testing
• Performance Testing
• Good programming/coding skills with the ability to read, write, troubleshoot, and debug code.
• Experience with automation testing frameworks/tools such as Selenium, Playwright, Cypress, Appium, etc.
• Hands-on API testing experience using tools such as Postman, REST Assured, RestSharp, or similar.
• Practical experience with performance testing tools such as JMeter, LoadRunner, k6, Gatling, or equivalent.
• Good understanding of SDLC, STLC, defect lifecycle, and testing methodologies.
• Strong analytical and problem-solving skills.

Good to Have

• Experience with Java, Python, JavaScript/TypeScript, C#, or other programming languages.
• Experience with .NET / C#.
• SQL/database testing experience.
• CI/CD tools such as Jenkins, GitHub Actions, Azure DevOps, GitLab CI, etc.
• Experience with Docker/cloud environments.
• BDD frameworks such as Cucumber or SpecFlow.
• Experience working with Agile/Scrum teams.

If Interested, share CV : snigdhaattheratebeanhr.com

Senior Automation Testing Engineer

Location: Bengaluru / Gurugram – Onsite

Experience: 5–11 Years

Employment Type: Full-Time

Key Responsibilities

• Develop and maintain automation test frameworks and scripts.
• Perform both manual and automation testing, including exploratory, functional, regression, and bug verification.
• Develop test cases and contribute to test planning, estimation, and Agile ceremonies.
• Perform non-functional testing for accuracy, reliability, and performance.
• Drive QA process and automation improvements.

Required Skills

• BE/B.Tech/ME/M.Tech in CS/ECE/EE or related field.
• 5–11 years of software testing experience.
• Strong hands-on experience with Python/Java, Selenium, Cucumber, and PyTest.
• Good knowledge of SDLC, testing methodologies, defect lifecycle, and risk assessment.
• Experience with version control and bug-tracking tools.

Good to Have: Linux, Qt/QML, Squish, ISTQB/CSM/PSM, and regulatory/compliance standards.

We are looking for a skilled Senior QA Developer with strong experience in automation and manual testing. The ideal candidate should have hands-on expertise in building automated test suites and executing end-to-end QA processes across web, mobile, and API applications. 

What You'll Own

• Develop and maintain automation scripts using Selenium, RestAssured, TestNG, Cucumber, (Appium and Playwright ). 
• Create comprehensive test plans, test cases, and test strategies for web, API, and backend applications. 
• Perform functional, regression, integration, API, and mobile testing. Log, track, and verify defects using tools like JIRA. 
• Work with developers and product teams to ensure complete requirement understanding and test coverage. 
• Improve automation coverage and QA processes continuously. Provide RCA for defects and suggest preventive improvements.

Who You Are

• You've built automation frameworks or test suites yourself, not only run scripts someone else wrote, using tools like Selenium, RestAssured, TestNG, Playwright, or Appium.
• You write clean, maintainable test code in Java, JavaScript, TypeScript, or Python, and you treat test code with the same care as production code.
• You think beyond the happy path. You look for edge cases, negative scenarios, and integration gaps before users find them.
• You're comfortable testing across layers, including web UIs, mobile apps, APIs, and backend services, and you understand how they connect.
• You don't stop at "it's broken." You dig into logs, network calls, and monitoring tools to find the root cause and help prevent the problem from recurring.
• You work closely with developers and product managers from the start, ask the right questions early, and make sure requirements are clear and testable.
• You have 3+ years of QA experience and are equally comfortable with automation and manual testing. You know when to automate and when exploratory testing adds more value.

Required Qualifications

• 3+ years of experience in QA (manual + automation). 
• Strong hands-on experience with at least one automation framework: 
• Solid experience with one or more automation frameworks: Selenium WebDriver, RestAssured, TestNG, Playwright, Appium. Good understanding of SDLC, STLC, test design techniques, and QA methodologies. 
• Hands-on Experience testing web, APIs, and backend services using Postman, Swagger etc. 
• Proficiency in Java/ JavaScript/ TypeScript / Python. 
• Strong debugging and analytical skills (Good to have understanding of AWS, Newrelic) 
• Good communication and collaboration skills.

Nice to Have

• Experience working in Agile/Scrum. 
• Knowledge of CI/CD tools (Jenkins, Git, Docker). 
• Exposure to performance or security testing (JMeter, Gatling, etc.). 
• ISTQB or other QA certifications (optional).