Security Vulnerability Testing/Assessment Engineer

AMD
Bengaluru
Workplace: HybridFull timeINR 3,103,450 - 4,433,500 annuallyFunction: Solutions Engineering & Sales EngineeringExperience: 3-10 yearsEducation: bachelorsSkills: ["Leadership","Coordination","Results-oriented","Curiosity"]

Drive security vulnerability testing across web apps, REST APIs, SPAs, management consoles, and thick-client Windows utilities. Assess modern attack surfaces (auth/session, access control, CORS, SSRF, injection, and LLM/AI-assisted features), analyze driver/firmware/IOCTL attack surfaces, and document and validate findings with proof-of-concept exploits. Build automation tooling and contribute to threat models and security architecture reviews for new product features.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
AMD
AMD
1 day ago

Security Vulnerability Testing/Assessment Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 2 hours agoStatus: Live

Job Summary

Drive security vulnerability testing across web apps, REST APIs, SPAs, management consoles, and thick-client Windows utilities. Assess modern attack surfaces (auth/session, access control, CORS, SSRF, injection, and LLM/AI-assisted features), analyze driver/firmware/IOCTL attack surfaces, and document and validate findings with proof-of-concept exploits. Build automation tooling and contribute to threat models and security architecture reviews for new product features.
Location: Bengaluru
Workplace: Hybrid
Employment Type: Full time
Job Function: Solutions Engineering & Sales Engineering
Seniority: Mid level

Key Responsibilities

  • •Conduct black-box and grey-box security assessments across web applications, REST APIs, SPAs, browser-based consoles, and thick-client/desktop applications, including Windows utilities and agents.
  • •Test web attack surfaces including authentication/session management, access control issues (IDOR/BOLA), CORS, SSRF, injection vulnerabilities, and LLM/AI-assisted features like prompt injection and sensitive data disclosure.
  • •Evaluate thick-client applications for insecure IPC, privilege escalation, DLL hijacking, insecure credential storage, unsafe deserialization, and trust boundary weaknesses.
  • •Perform static and dynamic analysis of Windows drivers, firmware interfaces, and IOCTL attack surfaces; identify and document vulnerabilities such as broken access control, injection flaws, sensitive disclosure, memory corruption, and insecure IOCTLs.
  • •Develop proof-of-concept exploits and build custom automation tooling/scripts to validate findings and accelerate reconnaissance, fuzzing, and repeatable assessment across engagements.

Pay and Benefits

Salary: INR 3,103,450 - 4,433,500 annually

Key Requirements

  • •3–10 years of experience in application or product security with substantial hands-on assessment work.
  • •Strong foundation in web application security, including OWASP Top 10 and API security testing (auth/authz bypass, injection, insecure deserialization, misconfigurations).
  • •End-to-end experience assessing REST APIs, web management interfaces, and thick-client/desktop applications from reconnaissance through reporting.
  • •Solid scripting and automation skills using Python, PowerShell, or C/C++ to build custom test harnesses, PoC exploits, and repeatable tooling.
  • •Familiarity with Windows internals, including the driver model, kernel/user boundary, privilege levels, and IOCTL handling.
Experience:3-10 yearsApplication securityProduct securityWeb securityAPI securityWindows security
Education:Bachelor's in computer or electrical engineering (or equivalent)
Skills:LeadershipCoordinationResults-orientedCuriosity
Languages:English
Tech Stack:PythonPowerShellC/C++REST APIsSingle-page applicationsWindowsKMDFWDMIOCTLBurp SuiteNmapOWASP Top 10OWASP API Top 10OWASP LLM Top 10ARM TrustZoneRISC-V WorldGuardHTTP

Company Brief

AMD
Designs and produces semiconductor products including CPUs, GPUs, and adaptive SoCs for consumer, enterprise, and embedded markets, competing across PCs, data centers, and gaming industries.
Industry: Electronics Manufacturing
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: Santa Clara, United States
Founded: 1969
Glassdoor
Glassdoor: 3.9
WebsiteLinkedIn