3677 Application Security Consultant jobs near me

Job Title: Technical Lead (Application Security testing - DAST)
City: Bengaluru
State/Province: Karnataka
Posting Start Date: 8/28/26

Wipro Limited (NYSE: WIT, BSE: 507685, NSE: WIPRO) is a leading technology services and consulting company focused on building innovative solutions that address clients’ most complex digital transformation needs. Leveraging our holistic portfolio of capabilities in consulting, design, engineering, and operations, we help clients realize their boldest ambitions and build future-ready, sustainable businesses. With over 230,000 employees and business partners across 65 countries, we deliver on the promise of helping our customers, colleagues, and communities thrive in an ever-changing world. For additional information, visit us at www.wipro.com.

Role: Application Security testing - DAST)
Location: Pune / Mumbai preferred, anywhere in India.

About the role:
Wipro is looking to onboard a Application Security test lead with experience in Application Security Testing - DAST supporting Corporate CISO.

R͏oles & Responsibilities

• Perform and lead DAST and manual penetration testing (web, API, mobile, thick client, SAP, and Gen-AI applications) using gray box approach.
• Perform security testing of Gen-AI/LLM-based applications, covering prompt injection, data leakage, access control, and API/model integration risks
• Oversee and optimize automated security scans, including configuration, tuning, and false positive reduction
• Perform and review API security testing (authentication, authorization, input validation, header and parameter manipulation)
• Identify, exploit, and review security test reports with clear risk rating, PoC, and remediation guidance
• Lead and mentor a team of security testers; review test quality, ensure coverage, and drive consistency
• Drive integration of security testing into CI/CD pipelines (DevSecOps) and ensure shift-left practices
• Introduce new enhancements in the testing track improving accuracy, quality. Liaising with vendors for enabling/upgrade of new features in the security scanning tools.
• Collaborate with developers, architects, and stakeholders to ensure timely remediation.
• Provide oversight and guidance on WAF onboarding, rule tuning, and policy effectiveness

Q͏ualifications

• Bachelor’s degree in a technical field
• 2-5 years of experience in application security testing / penetration testing
• Proven ability to lead teams, review deliverables, and manage stakeholders
• Strong hands-on expertise in DAST and manual penetration testing (web, API, mobile, thick client, SAP, and Gen-AI applications)
• Good understanding of SAP ecosystem including architecture, authorization concepts, RFC/ICF/OData exposure points, and testing prerequisites (including T-codes)
• Experience in security testing of Gen-AI/LLM-based applications
• Strong knowledge of OWASP Top 10, LLM Top 10, API top 10
• Experience in scan configuration, tuning, and authenticated scanning
• Hands-on experience with tools such as Burp Suite, WebInspect, Postman, Sysinternals, etc.
• Experience working in DevSecOps environments and CI/CD pipelines
• Good to have: Experience in WAF management and rule tuning

Good to have Certifications:

• CEH, GWAPT, GPEN, CISSP, or similar

Reinvent your world. We are building a modern Wipro. We are an end-to-end digital transformation partner with the boldest ambitions. To realize them, we need people inspired by reinvention. Of yourself, your career, and your skills. We want to see the constant evolution of our business and our industry. It has always been in our DNA - as the world around us changes, so do we. Join a business powered by purpose and a place that empowers you to design your own reinvention. Come to Wipro. Realize your ambitions.

Applications from people with disabilities are explicitly welcome.