Security Tester Pr
Requirements
- API Security Testing (REST and GraphQL).
- Authentication and Authorization testing.
- Bearer Token, OAuth, API Key validation.
- HTTP/HTTPS and TLS fundamentals.
- Python scripting for test automation and validation.
- Security assessment of web services and APIs.
- Vulnerability validation and risk assessment.
- Log analysis and troubleshooting.
- Creation of test evidence and technical reports.
Responsibilities
- Validate security controls implemented in connectors and platform integrations.
- Verify authentication and authorization mechanisms across APIs and services.
- Execute security-focused testing against REST and GraphQL APIs.
- Assess transport security configurations (TLS, certificates, encryption settings).
- Validate secure handling of credentials, secrets, and tokens.
- Review application logs to verify credential masking and secure error handling.
- Execute vulnerability assessments against integration components and exposed services.
- Collaborate with developers to analyze and remediate security findings.
- Validate compliance with security requirements defined by customer specifications.
- Produce technical security reports and remediation recommendations.
- Support final solution security sign-off activities.
Location: Softtek Mexico Offices
Languages: English advanced**.**