Senior Security Test Engineer

We have an urgent requirement for a " Senior Security Engineer " for the Hyderabad location (WFO 5 Days a Week) . Please find below the job description for your reference.

Experience : 7 + years

Notice Period : Immediate

Job Location : Hyderabad (WFO 5 Days a Week)

As the Senior Security Test Engineer, you will be the lead offensive security expert responsible for proactively identifying and mitigating vulnerabilities across our entire next-generation digital asset platform. You will be the authority on application, infrastructure, and blockchain security, leading the charge to ensure our systems are hardened against sophisticated threats in a high-stakes financial environment.

This is a deeply technical, hands-on leadership role for a seasoned penetration tester. You will not just run scans; you will architect our security testing strategy from the ground up, conduct sophisticated manual penetration tests, and serve as the expert consultant to all engineering teams on how to build secure code. You will be responsible for breaking our systems before the bad guys do, safeguarding our assets, our clients' assets, and our reputation.

## 2. Key Responsibilities

• Lead Offensive Security and Penetration Testing :
• Architect and own the end-to-end security testing strategy, including manual penetration testing, dynamic application security testing (DAST), and static application security testing (SAST).
• Conduct hands-on, expert-level penetration tests against our web applications, APIs, mobile apps, and cloud infrastructure, focusing on the OWASP Top 10 and financial-specific attack vectors.
• Cloud and Infrastructure Security Assessment :
• Lead security reviews and configuration audits of our cloud environment (AWS / GCP / Azure) and our Kubernetes (K8s) infrastructure.
• Analyze our Infrastructure as Code (Terraform) for security misconfigurations and vulnerabilities.
• Smart Contract Security Review :
• Collaborate with the blockchain engineering team to conduct internal security reviews of smart contracts, identifying potential vulnerabilities before they go to external audit.
• Review systems for financial logic flaws, such as reward-spoofing or withdrawal validation issues.
• Vulnerability Management and Remediation Guidance :
• Triage, validate, and prioritize vulnerabilities discovered through testing.
• Work directly with development teams to provide clear, actionable guidance on remediation and re-test fixes to ensure they are effective.
• Automate and Integrate Security Testing :
• Lead the effort to integrate automated security testing tools and checks into our CI / CD pipelines, enabling a DevSecOps culture.

Please share your CV along with below mentioned details to "arati.patnaik@valuelabs.com".

Total Experience :

Relevant Experience :

Current CTC :

Expected CTC :

Notice Period :

Current Location :

Interested to relocate Hyderabad :

Best regards,

Arati Patnaik