SAP ECP EC Payroll — QA Test Analyst

Required Skills:

Required Skills Hands-on experience with leading SAST and DAST tools including: Checkmarx Veracode Fortify Burp Suite OWASP ZAP Strong understanding of Secure Software Development Lifecycle (SSDLC) principles. Strong knowledge of OWASP Top 10 vulnerabilities and application security best practices. Experience integrating security testing into CI/CD pipelines including Jenkins Azure DevOps and GitLab CI. Ability to interpret validate prioritize and communicate vulnerability findings and remediation recommendations to technical and non-technical stakeholders. Strong understanding of both white-box (SAST) and black-box (DAST) testing methodologies. Practical experience in application security and vulnerability management. Qualifications Bachelors degree or higher in Computer Science Cybersecurity Information Security or a related field or equivalent professional experience. Security certifications such as CSSLP CEH or equivalent are preferred. Experience with cloud-native application security and container security. Knowledge of regulatory and compliance requirements related to application security. Good to Have Experience participating in or conducting Security Architecture Reviews to identify design-level vulnerabilities and ensure alignment with security best practices and organizational standards. Proficiency in Threat Modeling methodologies such as STRIDE PASTA or equivalent frameworks. Ability to systematically identify document assess and prioritize potential threats and attack vectors. Experience translating threat-model findings into actionable SAST/DAST test cases. Ability to ensure identified threats are adequately tested remediated and validated. Experience with DevSecOps cloud security container security API security and modern application architectures.

Required Education:

BE / / MCA / . in Computer Science or equivalent degree from an accredited university.