Jobs

Interviews
Job Alerts
Tools

Upskill and Grow with AI

Mock Interview Practice interviews in realistic simulations

Coding Practice Improve your coding skills with challenges

Certification Earn certifications to validate your skills

AI Learning Get trained with AI expert sessions

Career Path AI insights for smarter career decisions

AI Job Match Score AI-Powered Job Match Against Your Resume and Optimize Your Resume

Career Tools and Resources

Resume Builder Build Professional Resume with Ease

ATS Friendliness Check Check Resume Friendliness for Applicant Tracking Systems

Auto Apply Apply to hundreds of jobs on any platform effortlessly

Co-Pilot (Chrome Extension) Your AI Assistant for Seamless Browsing Efficiency

Interview Questions Streamline interviews with ready-to-use questions

Salaries Discover market-driven salary insights across skillsets and geographies

Companies Explore leading companies actively hiring talent
For Employers

Jobs

Interviews

Home
>
Jobs in Bengaluru
>
Kotak Life Insurance
>
Software Test Engineering II-Support Services-Applications-CTB

Software Test Engineering II-Support Services-Applications-CTB

Kotak Life Insurance

3 - 5 years

5 - 9 Lacs

Bengaluru

Posted:2 days ago| Platform:

Apply

Skills Required

Software Testing rest python burp suite web application microsoft azure development methodologies professional development docker sql ruby test engineering devops jenkins penetration testing agile api aws web application security scripting languages

Work Mode

Work from Office

Job Type

Full Time

Job Description

About The Role Job Title: Penetration Tester (Web Applications and REST APIs)

About Us:Kotak Mahindra Bank is seeking an experienced Penetration Tester to join our Platform Engineering team. As a Penetration Tester, you will be responsible for identifying vulnerabilities in web applications and REST APIs, providing recommendations for remediation, and ensuring the security posture of our clients' systems.

Job Summary:The successful candidate will have a strong background in penetration testing, including experience with various tools and techniques used to identify vulnerabilities in web applications and APIs. The ideal candidate will be able to analyze complex systems, identify potential security risks, and provide actionable recommendations for remediation.

Key Responsibilities:

Conduct thorough penetration testing of web applications and REST APIs using a variety of tools and techniques

Identify vulnerabilities in web applications, including but not limited to

SQL injection

Cross-Site Scripting (XSS)

Cross-Site Request Forgery (CSRF)

Authentication and authorization weaknesses

Session management issues

Test REST APIs for security vulnerabilities, including but not limited to

Input validation and sanitization

Error handling and logging

Authentication and authorization mechanisms

Data encryption and transmission

Analyze results and provide detailed reports outlining findings, recommendations for remediation, and estimated timeframes for implementation

Collaborate with development teams to ensure identified vulnerabilities are addressed and remediated in a timely manner

Stay up-to-date with the latest security threats, tools, and techniques through ongoing training and professional development

Requirements:

3+ years of experience in penetration testing, with a focus on web applications and REST APIs

Strong understanding of web application security concepts, including but not limited to

OWASP Top 10

Web Application Security Risks (WASR)

Secure Coding Practices

Experience with various penetration testing tools, including but not limited to

Burp Suite

ZAP

Nmap

AJP

SQL injection tools (e.g. sqlmap)

Strong understanding of REST API security concepts, including but not limited to

API Security Frameworks (e.g. OAuth 2.0)

Data encryption and transmission protocols (e.g. HTTPS)

Authentication and authorization mechanisms (e.g. JWT)

Experience with scripting languages (e.g. Python, Ruby) is a plus

Strong analytical and problem-solving skills

Excellent communication and reporting skills

Nice to Have:

CISSP or equivalent security certification

CEH or equivalent penetration testing certification

Experience with cloud-based services (e.g. AWS, Azure)

Familiarity with Agile development methodologies

Experience with DevOps tools (e.g. Docker, Jenkins)

More Jobs at Kotak Life Insurance

Sales Manager Mega Drive 09-May-25

Chennai

2 - 7 yrs

INR 2 - 7 Lacs

Associate Recruitment And Development Manager

Bhopal, Indore, Chandigarh

2 - 4 yrs

INR 1 - 4 Lacs

Recruitment Development Manager_ Kotak Life Insurance.

Rajahmundry, Vijayawada, Belgaum

1 - 6 yrs

INR 2 - 5 Lacs

Managing Partner For Kotak Life insurance Mega Walkin 09-May-25

Chennai

2 - 7 yrs

INR 2 - 6 Lacs

Premier Acquisition Manager-RL SALES-Sales

Mysuru

1 - 6 yrs

INR 3 - 5 Lacs

Mock Interview

Practice Video Interview with JobPe AI

Start Python Interview

Start Your Job Search Today

Browse through a variety of job opportunities tailored to your skills and preferences. Filter by location, experience, salary, and more to find your perfect fit.

Job Application AI Bot

Apply to 20+ Portals in one click

Download Now

Download the Mobile App

Instantly access job listings, apply easily, and track applications.

Enhance Your Python Skills

Practice Python coding challenges to boost your skills

Start Practicing Python Now

Kotak Life Insurance

Insurance

Jaipur

Login to

Please Verify Your Phone or Email

Confirm Action

Search

Profile

Upskill and Grow with AI

Software Test Engineering II-Support Services-Applications-CTB