Security Tester Senior

Requirements

- API Security Testing (REST and GraphQL).
- Authentication and Authorization testing.
- Bearer Token, OAuth, API Key validation.
- HTTP/HTTPS and TLS fundamentals.
- Python scripting for test automation and validation.
- Security assessment of web services and APIs.
- Vulnerability validation and risk assessment.
- Log analysis and troubleshooting.
- Creation of test evidence and technical reports.

Responsibilities

- Validate security controls implemented in connectors and platform integrations.
- Verify authentication and authorization mechanisms across APIs and services.
- Execute security-focused testing against REST and GraphQL APIs.
- Assess transport security configurations (TLS, certificates, encryption settings).




- Validate secure handling of credentials, secrets, and tokens.
- Review application logs to verify credential masking and secure error handling.
- Execute vulnerability assessments against integration components and exposed services.
- Collaborate with developers to analyze and remediate security findings.
- Validate compliance with security requirements defined by customer specifications.
- Produce technical security reports and remediation recommendations.
- Support final solution security sign-off activities.

Location: Softtek Mexico OfficesLanguages: English advanced

📌 Security Tester Sr (México)
🏢 SOFTTEK
📍 México