{"id":1227714,"url":"https://alion.io/job/enphaseenergy-security-test-engineer","title":"Security Test Engineer","company":{"id":1927441,"name":"Enphase Energy","domain":"enphaseenergy.com","url":"https://alion.io/company/enphaseenergy","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"QA","role_family":"QA","seniority":"junior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Bash","optional":false},{"name":"Burp Suite","optional":false},{"name":"CI/CD","optional":false},{"name":"IAM","optional":false},{"name":"Linux","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"OWASP ZAP","optional":false},{"name":"Polaris","optional":false},{"name":"Python","optional":false},{"name":"Red Teaming","optional":false},{"name":"Rest API","optional":false},{"name":"SonarQube","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Kubernetes","optional":true},{"name":"MITRE ATT&CK","optional":true}],"status":"live","first_seen_at":"2026-09-23T08:29:48Z","employer_posted_date":null,"last_verified_at":"2026-09-23T08:29:48Z","board_verified":false,"closed_at":null,"days_open":22,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":22},"description":"Description :\n\nEnphase Energy is a global energy technology company and a leading provider of solar, battery, and electric vehicle charging products.\n\nFounded in 2006, our innovative microinverter technology revolutionized solar power, making it a safer, more reliable, and scalable energy source.\n\nToday, the Enphase Energy System enables users to make, use, save, and sell their own power.\n\nEnphase is also one of the most successful and innovative clean energy companies in the world, with more than 80 million products shipped across 160 countries.\n\nJoin our dynamic teams designing and developing next-gen energy technologies and help drive a sustainable future!\n\nThis role at Enphase requires working onsite 3 days a week, with plans to transition back to a full 5 day in office schedule over time.\n\nSecurity Test Engineer :\n\nAs a Security Test Engineer at Enphase Energy, you will help secure our applications, APIs, and AWS-based infrastructure that support millions of energy systems globally.\n\nWorking closely with senior security engineers, you will perform security assessments, identify vulnerabilities, support remediation efforts, and contribute to offensive security initiatives.\n\nThis role is ideal for a security professional with a passion for penetration testing, application security, red teaming, and secure development practices.\n\nWhat You Will Be Doing :\n\n- Perform hands-on penetration testing of web applications, APIs, and backend services.\n\n- Conduct vulnerability assessments and security reviews of applications and AWS environments.\n\n- Use security testing tools such as Polaris, Black Duck (SCA), SonarQube, Burp Suite, and OWASP ZAP to identify and validate security issues.\n\n- Execute Static Application Security Testing (SAST), Software Composition Analysis (SCA), and Dynamic Application Security Testing (DAST) activities.\n\n- Validate security findings and work with engineering teams on remediation recommendations.\n\n- Assist in integrating security testing into CI/CD pipelines and support secure SDLC initiatives.\n\n- Perform AWS security assessments, including IAM reviews, privilege analysis, network security reviews, and configuration assessments.\n\n- Participate in threat modeling exercises and security architecture reviews.\n\n- Execute red team exercise and adversary emulation activities to identify real-world attack paths.\n\n- Develop scripts and automation using Python or Bash to improve security testing processes.\n\n- Research emerging threats, vulnerabilities, and attack techniques affecting web applications and cloud-native environments.\n\n- Track vulnerabilities through remediation and closure.\n\nWhat You Bring :\n\n- BE/BTech in Computer Science, Information Security, Electronics, or a related field.\n\n- 2 - 4 years of experience in Application Security, Penetration Testing, Security Testing, or Offensive Security.\n\n- Hands-on experience with Burp Suite, OWASP ZAP, Polaris, Black Duck (SCA), SonarQube.\n\n- Strong understanding of: OWASP Top 10, API Security Top 10, Secure Coding Practices, Vulnerability Assessment and Penetration Testing (VAPT).\n\n- Experience performing manual security testing of web applications and REST APIs.\n\n- Working knowledge of AWS security concepts, including IAM, security groups, VPCs, secrets management, and access controls.\n\n- Familiarity with SAST, DAST, and SCA methodologies.\n\n- Basic understanding of threat modeling and attack surface analysis.\n\n- Experience using Linux environments and security testing tools.\n\n- Proficiency in Python, Bash, or other scripting languages.\n\n- Strong analytical and problem-solving skills.\n\nNice to Have :\n\n- Hands-on experience with red team exercises or adversary simulation activities.\n\n- Exposure to MITRE ATT&CK framework.\n\n- Experience with container and Kubernetes security testing.\n\n- Knowledge of DevSecOps and CI/CD security practices.\n\n- Experience participating in bug bounty programs or CTF competitions.\n\n- Relevant certifications (Not Mandatory): OSCP & CEH.\n\nSkills\nVAPT, Penetration Testing, Python, AWS, SonarQube, Applications Security, Linux, OSCP, Cloud Security, Security Testing","description_format":"text","description_chars":4131,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":[],"lifecycle":[{"event":"open","at":"2026-09-25T13:06:44Z"}],"visa":[],"liveness":{"score":34,"band":"fade","label":"Fading","p_open":0.85,"p_active":0.719,"p_room":0.55,"age_days":21,"expected_fill_days":17,"reasons":["seen:21","velocity","win:tail","comp:junior"],"computed_at":"2026-10-15T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/enphaseenergy-security-test-engineer","json_url":"https://alion.io/job/enphaseenergy-security-test-engineer.json","meta":{"generated_at":"2026-10-15T10:59:18Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":16840,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1927441},"rest":"https://alion.io/mcp/rest/get_company?id=1927441"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fenphaseenergy-security-test-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fenphaseenergy-security-test-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fenphaseenergy-security-test-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/enphaseenergy-security-test-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fenphaseenergy-security-test-engineer"}]}