Job Description

Key Responsibilities

• Lead and manage a team of security testers across multiple projects.
• Define and implement security testing strategies for Web, Mobile, APIs, and MCP-based applications.
• Perform and oversee security assessments including:
• MCP Security Testing
• Web Application Penetration Testing
• Mobile Application Security Testing (Android & iOS)
• API Security Testing
• Secure Code Review
• Threat Modeling
• Review MCP architecture, connector integrations, tool invocation mechanisms, and AI-agent interactions for security risks.
• Identify vulnerabilities related to:
• Prompt Injection
• Tool Poisoning
• Unauthorized Tool Access
• Data Leakage
• Excessive Permissions
• Authentication & Authorization Flaws
• Insecure Context Sharing
• AI Agent Abuse Scenarios
• Conduct security reviews for AI/LLM-enabled applications and MCP ecosystems.
• Provide remediation recommendations and work closely with development and architecture teams.
• Prepare security assessment reports and executive-level risk summaries.
• Participate in customer discussions, audits, and security governance meetings.
• Mentor and guide junior security testers and security engineers.

Required Skills

MCP & AI Security

• Strong hands-on experience in MCP (Model Context Protocol) Security Testing.
• Understanding of MCP architecture, MCP servers, clients, tools, prompts, and resources.
• Experience identifying AI and MCP-specific security risks.
• Experience testing AI Agents, Copilot solutions, Agentic workflows, RAG systems, and LLM integrations.
• Knowledge of OWASP Top 10 for LLM Applications and AI Security best practices.

Application Security

• Web Application Security Testing.
• Mobile Application Security Testing (Android/iOS).
• API Security Testing.
• Secure Code Review.
• Threat Modeling and Risk Assessment.
• Authentication, Authorization, SSO, OAuth2, OpenID Connect, SAML.

Security Tools

• Burp Suite Enterprise/Professional.
• OWASP ZAP.
• MobSF. Appknox
• Snyk, Checkmarx, Veracode, Fortify or equivalent SAST tools.
• Postman, Swagger.
• SIEM and vulnerability management platforms.

Security Standards

• OWASP Top 10.
• OWASP API Security Top 10.
• OWASP Mobile Top 10.
• OWASP LLM Top 10.
• NIST Secure Development Framework.
• PCI-DSS, SOC2, ISO 27001 awareness.

Leadership Responsibilities

• Manage and mentor a team of 4–5 security professionals.
• Drive resource planning, estimations, and project execution.
• Establish security testing frameworks, processes, and governance.
• Conduct technical reviews and support practice development initiatives.
• Support presales, solutioning, and client presentations.

Preferred Qualifications

• Bachelor's or Master's degree in Computer Science, Cyber Security, or related field.
• Security certifications such as:
• CISSP
• OSCP
• CEH
• GWAPT
• CompTIA Security+
• GIAC Certifications
• Experience working with enterprise AI solutions, Microsoft Copilot ecosystem, and MCP-based platforms is highly preferred.

Key Competencies

• Strong leadership and stakeholder management skills.
• Excellent client-facing communication.
• Security architecture and consulting mindset.
• Problem-solving and analytical thinking.
• Ability to drive multiple security engagements simultaneously.

OK

OK

At Zensar, we’re “experience-led everything”. We are committed to conceptualizing, designing, engineering, marketing, and managing digital solutions and experiences for over 130 leading enterprises. We are a company driven by a bold purpose: Together, we shape experiences for better futures. Whether for our clients, our people, or the world around us, this belief powers everything we do. At the heart of our culture is ONE with Client - a set of four core values that reflect who we are and how we work: One Zensar, Nurturing, Empowering, and Client Focus.

Part of the $4.8 billion RPG Group, we’re a community of 10,000+ innovators across 30+ global locations, including Milpitas, Seattle, Princeton, Cape Town, London, Zurich, Singapore, and Mexico City. Explore Life at Zensar and join us to Grow. Own. Achieve. Learn. to be the best version of yourself.

We believe the best work happens when individuality is celebrated, growth is encouraged, and well-being is prioritized. We are an equal employment opportunity (EEO) and affirmative action employer, committed to creating an inclusive workplace. All qualified applicants will be considered without regard to race, creed, color, ancestry, religion, sex, national origin, citizenship, age, sexual orientation, gender identity, disability, marital status, family medical leave status, or protected veteran status.