Application Security Testing Engineer - SAST/DAST (2-5 yrs)

Who we are...?

REA India is a part of REA Group Ltd. of Australia (ASX: REA) ("REA Group"). It is the country's leading full stack real estate technology platform that owns Housing.com and PropTiger.com.

In December 2020, REA Group acquired a controlling stake in REA India. REA Group, headquartered in Melbourne, Australia, is a multinational digital advertising business specialising in property. It operates Australia's leading residential and commercial property websites, realestate.com.au and realcommercial.com.au and owns leading portals in Hong Kong (squarefoot.com.hk) and China (myfun.com). REA Group also holds a significant minority shareholding in Move, Inc., operator of realtor.com in the US, and the PropertyGuru Group, operator of leading property sites in Malaysia, Singapore, Thailand, Vietnam and Indonesia.

REA India is the only player in India that offers a full range of services in the real estate space, assisting consumers through their entire home seeking journey all the way from initial search and discovery to financing to the final step of transaction closure. It offers advertising and listings products to real estate developers, agents & homeowners, exclusive sales and marketing solutions to builders, data and content services, and personalized search, virtual viewing, site visits, negotiations, home loans and post- sales services to consumers for both buying and renting.

With a 1600+ strong team, REA India has a national presence with 25+ offices across India with its corporate office located in Gurugram, Haryana.

Housing.com :

Founded in 2012 and acquired by REA India in 2017, Housing.com is India's most innovative real estate advertising platform for homeowners, landlords, developers, and real estate brokers. The company offers listings for new homes, resale homes, rentals, plots and co-living spaces in India. Backed by strong research and analytics, the company's experts provide comprehensive real estate services that cover advertising and marketing, sales solutions for real estate developers, personalized search, virtual viewing, AR&VR content, home loans, end-to-end transaction services, and post-transaction services to consumers for both buying and renting.

PropTiger.com :

PropTiger.com is among India's leading digital real estate advisory firm offering a one-stop platform for buying residential real estate. Founded in 2011 with the goal to help people buy their dream homes, PropTiger.com leverages the power of information and the organisation's deep- rooted understanding of the real estate sector to bring simplicity, transparency and trust in the home buying process. PropTiger.com helps home-buyers through the entire home-buying process through a mix of technology-enabled tools as well as on-ground support. The company offers researched information about various localities and properties and provides guidance on matters pertaining to legal paperwork and loan assistance to successfully fulfil a transaction.

Our Vision :

Changing the way India experiences property.

Our Mission :

To be the first choice of our consumers and partners in discovering, renting, buying, selling, financing a home, and digitally enabling them throughout their journey. We do that with data, design, technology, and above all, the passion of our people while delivering value to our shareholders.

Our Culture :

Culture forms the core of our foundation and our effort towards creating an engaging workplace that has resulted in REA India being ranked 5th among the coveted list of India's Best 100 Companies to Work For in 2024 by the Great Place to Work Institute- . REA India was also ranked among Top 5 workplaces list in 2023, the Top 25 workplaces list in 2022 and 2021, and the Top 50 workplaces list in 2019. In addition, REA India was also recognized as Best WorkplaceTM in Building a Culture of Innovation by All in 2024 & 2023 and India's Best WorkplacesTM in Retail (e-commerce category) for the fourth time in 2024. REA India is ranked 4th among Best Workplaces in Asia in 2023 and was ranked 55th in 2022, & 48th in 2021 apart from being recognized as Top 50 Best WorkplacesTM for Women in India in 2023 and 2021. REA India is also recognized as one of India's Top 50 Best Workplaces for Millennials in 2023 by Great Place to Work- .

At REA India, we believe in creating a home for our people, where they feel a sense of belonging and purpose. By fostering a culture of inclusion and continuous learning and growth, every team member has the opportunity to thrive, embrace the spirit of being part of a global family, while contributing to revolutionize the way India experiences property. When you come to REA India,

you truly COME HOME! :

REA India (Housing.com, PropTiger.com) is an equal opportunity employer and welcomes all qualified individuals to apply for employment. We are committed to creating an environment that is free from discrimination, harassment, and any other form of unlawful behavior. We value diversity and inclusion and do not discriminate against our people or applicants for employment based on age, color, gender, marital status, caste, religion, race, ethnic group, nationality, religious or political conviction, sexual orientation, gender identity, pregnancy, family responsibility, or disability or any other legally protected status. We firmly strive to eliminate any barriers that may impede equal opportunities while also recognizing that specific job roles may require appointees to possess the necessary qualifications, skills, abilities to perform essential functions of the position effectively.

What does this role hold for you...??

AppSec Engineer focused on security testing automation, vulnerability assessment, and securing the SDLC through automated testing implementation.

Core Responsibilities :

Security Testing :

- Design and execute application security testing strategies

- Implement automated SAST/DAST in CI/CD pipelines

- Conduct manual penetration testing

- Perform API security testing

- Create custom security test cases

- Execute mobile application security testing

Test Automation :

- Develop Python scripts for security test automation

- Create custom security testing frameworks

- Automate vulnerability scanning workflows

- Build security test reporting tools

- Integrate security testing in CI/CD

Vulnerability Management :

- Analyze and validate security findings

- Prioritize vulnerabilities based on risk

- Create remediation guidance

- Track security fixes

- Generate security metrics and reports

Required Technical Skills :

- Advanced Python scripting

- SAST tools (Checkmarx, SonarQube)

- DAST tools (Burp Suite, OWASP ZAP)

- API testing tools (Postman, SoapUI)

- Web application security testing

- CI/CD security integration

Security Knowledge :

- OWASP Top 10

- Common vulnerability types

- Security testing methodologies

- Web application architecture

- API security testing

- Basic cloud security concepts

Qualifications :

- 3-4 years in application security testing

- Strong Python automation experience

- Security certifications preferred (GWAPT, OSCP, CEH)

- Experience with bug bounty programs a plus

Key Competencies :

- Analytical thinking

- Attack mindset

- Detail-oriented testing

- Clear technical documentation

- Team collaboration