Security Test Engineer
Enphase Energy5 days ago
Bengaluru, IndiaMid Level / Senior
Responsibilities
- Perform hands-on penetration testing of web applications, APIs, and backend services.
- Conduct vulnerability assessments and security reviews of applications and AWS environments.
- Use Polaris, Black Duck, SonarQube, Burp Suite, and OWASP ZAP to identify and validate security issues.
- Execute SAST, SCA, and DAST activities and support secure SDLC initiatives.
- Validate findings, recommend remediations, and track vulnerabilities through closure with engineering teams.
- Perform AWS security assessments covering IAM, privileges, network security, and configurations.
- Participate in threat modeling, security architecture reviews, red team exercises, and adversary emulation.
- Develop Python or Bash scripts and automation to improve security testing processes.
- Research emerging threats, vulnerabilities, and attack techniques affecting web applications and cloud-native environments.
Requirements
- Bachelor of Engineering or Bachelor of Technology in Computer Science, Information Security, Electronics, or a related field.
- 2–4 years of experience in application security, penetration testing, security testing, or offensive security.
- Hands-on experience with Burp Suite, OWASP ZAP, Polaris, Black Duck, and SonarQube.
- Strong understanding of the OWASP Top 10, API Security Top 10, secure coding practices, and VAPT.
- Experience with manual security testing of web applications and REST APIs.
- Working knowledge of AWS security concepts, including IAM, security groups, VPCs, secrets management, and access controls.
- Familiarity with SAST, DAST, and SCA methodologies, threat modeling, and attack surface analysis.
- Experience with Linux environments and security testing tools.
- Proficiency in Python, Bash, or other scripting languages.
- Experience with red team exercises, adversary simulation, container or Kubernetes security testing, DevSecOps, CI/CD security practices, bug bounty programs, or CTF competitions is preferred.
- OSCP or CEH certification is preferred but not mandatory.
Benefits
- The role requires working onsite three days per week, with plans to transition to a full five-day office schedule over time.
Tech Stack
Categories
About Enphase Energy
Enphase Energy builds microinverter-based solar hardware, home energy storage batteries, EV chargers, and monitoring software for residential and small‑commercial customers, sold primarily through installers and distributors. Founded in 2006 and headquartered in Fremont, California, the company is publicly traded on NASDAQ (ENPH). Its Enphase Energy System lets users make, use, save, and sell power, and the firm reports more than 80 million products shipped across 160 countries.