Application Security Testing Engineer

Who we are...?REA India is a part of REA Group Ltd. of Australia (ASX: REA) (“REA Group”). It is the country’s leading full stack real estate technology platform that owns Housing.com and PropTiger.com.In December 2020, REA Group acquired a controlling stake in REA India. REA Group, headquartered in Melbourne, Australia, is a multinational digital advertising business specialising in property. It operates Australia’s leading residential and commercial property websites, realestate.com.au and realcommercial.com.au and owns leading portals in Hong Kong (squarefoot.com.hk) and China (myfun.com). REA Group also holds a significant minority shareholding in Move, Inc., operator of realtor.com in the US, and the PropertyGuru Group, operator of leading property sites in Malaysia, Singapore, Thailand, Vietnam and Indonesia.REA India is the only player in India that offers a full range of services in the real estate space, assisting consumers through their entire home seeking journey all the way from initial search and discovery to financing to the final step of transaction closure. It offers advertising and listings products to real estate developers, agents & homeowners, exclusive sales and marketing solutions to builders, data and content services, and personalized search, virtual viewing, site visits, negotiations, home loans and post- sales services to consumers for both buying and renting.With a 1600+ strong team, REA India has a national presence with 25+ offices across India with its corporate office located in Gurugram, Haryana.Housing.comFounded in 2012 and acquired by REA India in 2017, Housing.com is India’s most innovative real estate advertising platform for homeowners, landlords, developers, and real estate brokers. The company offers listings for new homes, resale homes, rentals, plots and co-living spaces in India. Backed by strong research and analytics, the company’s experts provide comprehensive real estate services that cover advertising and marketing, sales solutions for real estate developers, personalized search, virtual viewing, AR&VR content, home loans, end-to-end transaction services, and post-transaction services to consumers for both buying and renting.

PropTiger.comPropTiger.com is among India’s leading digital real estate advisory firm offering a one-stop platform for buying residential real estate. Founded in 2011 with the goal to help people buy their dream homes, PropTiger.com leverages the power of information and the organisation’s deep- rooted understanding of the real estate sector to bring simplicity, transparency and trust in the home buying process. PropTiger.com helps home-buyers through the entire home-buying process through a mix of technology-enabled tools as well as on-ground support. The company offers researched information about various localities and properties and provides guidance on matters pertaining to legal paperwork and loan assistance to successfully fulfil a transaction.Our VisionChanging the way India experiences property.Our MissionTo be the first choice of our consumers and partners in discovering, renting, buying, selling, financing a home, and digitally enabling them throughout their journey. We do that with data, design, technology, and above all, the passion of our people while delivering value to our shareholders.Our CultureCulture forms the core of our foundation and our effort towards creating an engaging workplace that has resulted in REA India being ranked 5th among the coveted list of India’s Best 100 Companies to Work For in 2024 by the Great Place to Work Institute®. REA India was also ranked among Top 5 workplaces list in 2023, the Top 25 workplaces list in 2022 and 2021, and the Top 50 workplaces list in 2019. In addition, REA India was also recognized as Best WorkplaceTM in Building a Culture of Innovation by All in 2024 & 2023 and India’s Best WorkplacesTM in Retail (e-commerce category) for the fourth time in 2024. REA India is ranked 4th among Best Workplaces in Asia in 2023 and was ranked 55th in 2022, & 48th in 2021 apart from being recognized as Top 50 Best WorkplacesTM for Women in India in 2023 and 2021. REA India is also recognized as one of India's Top 50 Best Workplaces for Millennials in 2023 by Great Place to Work®.

At REA India, we believe in creating a home for our people, where they feel a sense of belonging and purpose. By fostering a culture of inclusion and continuous learning and growth, every team member has the opportunity to thrive, embrace the spirit of being part of a global family, while contributing to revolutionize the way India experiences property. When you come to REA India,you truly COME HOMEREA India (Housing.com, PropTiger.com) is an equal opportunity employer and welcomes all qualified individuals to apply for employment. We are committed to creating an environment that is free from discrimination, harassment, and any other form of unlawful behavior. We value diversity and inclusion and do not discriminate against our people or applicants for employment based on age, color, gender, marital status, caste, religion, race, ethnic group, nationality, religious or political conviction, sexual orientation, gender identity, pregnancy, family responsibility, or disability or any other legally protected status. We firmly strive to eliminate any barriers that may impede equal opportunities while also recognizing that specific job roles may require appointees to possess the necessary qualifications, skills, abilities to perform essential functions of the position effectively.

What does this role hold for you...??AppSec Engineer focused on security testing automation, vulnerability assessment, and securing the SDLC through automated testing implementation.Core Responsibilities:Security TestingDesign and execute application security testing strategiesImplement automated SAST/DAST in CI/CD pipelinesConduct manual penetration testingPerform API security testingCreate custom security test casesExecute mobile application security testingTest AutomationDevelop Python scripts for security test automationCreate custom security testing frameworksAutomate vulnerability scanning workflowsBuild security test reporting toolsIntegrate security testing in CI/CDVulnerability ManagementAnalyze and validate security findingsPrioritize vulnerabilities based on riskCreate remediation guidanceTrack security fixesGenerate security metrics and reports

Required Technical SkillsAdvanced Python scriptingSAST tools (Checkmarx, SonarQube)DAST tools (Burp Suite, OWASP ZAP)API testing tools (Postman, SoapUI)Web application security testingCI/CD security integrationSecurity KnowledgeOWASP Top 10Common vulnerability typesSecurity testing methodologiesWeb application architectureAPI security testingBasic cloud security conceptsQualifications3-4 years in application security testingStrong Python automation experienceSecurity certifications preferred (GWAPT, OSCP, CEH)Experience with bug bounty programs a plusKey CompetenciesAnalytical thinkingAttack mindsetDetail-oriented testingClear technical documentationTeam collaborationKnow more about us…

Visit our career websites at & LinkedIn page to know more about our company culture, and gain insights into what makes us a Great Place to Work.

Want to dive into what we do? Visit our main websites for an in-depth look at &

---