Enphase Energy is a global energy technology company and a leading provider of solar, battery, and electric vehicle charging products. Founded in 2006, our innovative microinverter technology revolutionized solar power, making it a safer, more reliable, and scalable energy source. Today, the Enphase Energy System enables users to make, use, save, and sell their own power. Enphase is also one of the most successful and innovative clean energy companies in the world, with more than 80 million products shipped across 160 countries. Join our dynamic teams designing and developing next-gen energy technologies and help drive a sustainable future! This role at Enphase requires working onsite 3 days a week, with plans to transition back to a full 5 day in office schedule over time. Security Test EngineerAs a Security Test Engineer at Enphase Energy, you will help secure our applications, APIs, and AWS-based infrastructure that support millions of energy systems globally. Working closely with senior security engineers, you will perform security assessments, identify vulnerabilities, support remediation efforts, and contribute to offensive security initiatives.This role is ideal for a security professional with a passion for penetration testing, application security, red teaming, and secure development practices. What You Will Be Doing<ul style="margin-top:0.0px;"><li>Perform hands-on penetration testing of web applications, APIs, and backend services.</li><li>Conduct vulnerability assessments and security reviews of applications and AWS environments.</li><li>Use security testing tools such as Polaris, Black Duck (SCA), SonarQube, Burp Suite, and OWASP ZAP to identify and validate security issues.</li><li>Execute Static Application Security Testing (SAST), Software Composition Analysis (SCA), and Dynamic Application Security Testing (DAST) activities.</li><li>Validate security findings and work with engineering teams on remediation recommendations.</li><li>Assist in integrating security testing into CI/CD pipelines and support secure SDLC initiatives.</li><li>Perform AWS security assessments, including IAM reviews, privilege analysis, network security reviews, and configuration assessments.</li><li>Participate in threat modeling exercises and security architecture reviews.</li><li>Execute red team exercise and adversary emulation activities to identify real-world attack paths.</li><li>Develop scripts and automation using Python or Bash to improve security testing processes.</li><li>Research emerging threats, vulnerabilities, and attack techniques affecting web applications and cloud-native environments.</li><li>Track vulnerabilities through remediation and closure.</li></ul> What You Bring<ul style="margin-top:0.0px;"><li>BE/BTech in Computer Science, Information Security, Electronics, or a related field.</li><li>2-4 years of experience in Application Security, Penetration Testing, Security Testing, or Offensive Security.</li><li>Hands-on experience with Burp Suite, OWASP ZAP, Polaris, Black Duck (SCA), SonarQube</li><li>Strong understanding of: OWASP Top 10, API Security Top 10, Secure Coding Practices, Vulnerability Assessment and Penetration Testing (VAPT)</li><li>Experience performing manual security testing of web applications and REST APIs.</li><li>Working knowledge of AWS security concepts, including IAM, security groups, VPCs, secrets management, and access controls.</li><li>Familiarity with SAST, DAST, and SCA methodologies.</li><li>Basic understanding of threat modeling and attack surface analysis.</li><li>Experience using Linux environments and security testing tools.</li><li>Proficiency in Python, Bash, or other scripting languages.</li><li>Strong analytical and problem-solving skills.</li></ul> Nice to Have<ul style="margin-top:0.0px;"><li>Hands-on experience with red team exercises or adversary simulation activities.</li><li>Exposure to MITRE ATT&amp;CK framework.</li><li>Experience with container and Kubernetes security testing.</li><li>Knowledge of DevSecOps and CI/CD security practices.</li><li>Experience participating in bug bounty programs or CTF competitions.</li><li>Relevant certifications (Not Mandatory): OSCP &amp; CEH</li></ul>

At Enphase, we think big. We’re on a mission to bring solar energy to the next level, one where it’s ready to meet the energy demands of an entire globe. As we work towards our vision for a solar-powered planet, we never lose sight of the three commitments that have guided us from the beginning: innovation, quality, and responsibility.
We’ve always pushed the boundaries of solar technology, ever since our founders took one look at a string inverter and knew they could do better. We’re still at it. We’re passionate about developing new technologies that make energy more intelligent, more connected, and more cost effective than ever before.

Mission
To deliver technology solutions that make clean energy affordable, reliable and accessible to all.

Values
We are experts in our discipline and love what we do
We are passionate about winning
We have high aspirations and set bold goals
We are enthusiastic about delivering the best customer experience
We are open, honest, transparent and respectful with our colleagues

Vision
The world's leading clean energy solution provider

We're changing energy. Come join us.

Security Test Engineer

Enphase Energy is a global energy technology company and a leading provider of solar, battery, and electric vehicle charging products. Founded in 2006, our innovative microinverter technology revolutionized solar power, making it a safer, more reliable, and scalable energy source. Today, the Enphase Energy System enables users to make, use, save, and sell their own power. Enphase is also one of the most successful and innovative clean energy companies in the world, with more than 80 million products shipped across 160 countries. Join our dynamic teams designing and developing next-gen energy technologies and help drive a sustainable future! This role at Enphase requires working onsite 3 days a week, with plans to transition back to a full 5 day in office schedule over time. Security Test EngineerAs a Security Test Engineer at Enphase Energy, you will help secure our applications, APIs, and AWS-based infrastructure that support millions of energy systems globally. Working closely with senior security engineers, you will perform security assessments, identify vulnerabilities, support remediation efforts, and contribute to offensive security initiatives.This role is ideal for a security professional with a passion for penetration testing, application security, red teaming, and secure development practices. What You Will Be Doing<ul><li>Perform hands-on penetration testing of web applications, APIs, and backend services.</li><li>Conduct vulnerability assessments and security reviews of applications and AWS environments.</li><li>Use security testing tools such as Polaris, Black Duck (SCA), SonarQube, Burp Suite, and OWASP ZAP to identify and validate security issues.</li><li>Execute Static Application Security Testing (SAST), Software Composition Analysis (SCA), and Dynamic Application Security Testing (DAST) activities.</li><li>Validate security findings and work with engineering teams on remediation recommendations.</li><li>Assist in integrating security testing into CI/CD pipelines and support secure SDLC initiatives.</li><li>Perform AWS security assessments, including IAM reviews, privilege analysis, network security reviews, and configuration assessments.</li><li>Participate in threat modeling exercises and security architecture reviews.</li><li>Execute red team exercise and adversary emulation activities to identify real-world attack paths.</li><li>Develop scripts and automation using Python or Bash to improve security testing processes.</li><li>Research emerging threats, vulnerabilities, and attack techniques affecting web applications and cloud-native environments.</li><li>Track vulnerabilities through remediation and closure.</li></ul> What You Bring<ul><li>BE/BTech in Computer Science, Information Security, Electronics, or a related field.</li><li>2-4 years of experience in Application Security, Penetration Testing, Security Testing, or Offensive Security.</li><li>Hands-on experience with Burp Suite, OWASP ZAP, Polaris, Black Duck (SCA), SonarQube</li><li>Strong understanding of: OWASP Top 10, API Security Top 10, Secure Coding Practices, Vulnerability Assessment and Penetration Testing (VAPT)</li><li>Experience performing manual security testing of web applications and REST APIs.</li><li>Working knowledge of AWS security concepts, including IAM, security groups, VPCs, secrets management, and access controls.</li><li>Familiarity with SAST, DAST, and SCA methodologies.</li><li>Basic understanding of threat modeling and attack surface analysis.</li><li>Experience using Linux environments and security testing tools.</li><li>Proficiency in Python, Bash, or other scripting languages.</li><li>Strong analytical and problem-solving skills.</li></ul> Nice to Have<ul><li>Hands-on experience with red team exercises or adversary simulation activities.</li><li>Exposure to MITRE ATT&amp;CK framework.</li><li>Experience with container and Kubernetes security testing.</li><li>Knowledge of DevSecOps and CI/CD security practices.</li><li>Experience participating in bug bounty programs or CTF competitions.</li><li>Relevant certifications (Not Mandatory): OSCP &amp; CEH</li></ul>

Security Test Engineer

About the Job

About the Company

EnPhase Energy

Similar Jobs

Network Engineer

Network Engineer

Cyber Security Analyst

Cyber Security Analyst

OT Security Engineer (all genders)

OT Security Engineer (all genders)

Sr. Product Security Engineer

Sr. Product Security Engineer

Specialist, DevSecOps

Specialist, DevSecOps

Sr Security Engineer

Sr Security Engineer

Engineer II – Network & Cloud Security

Engineer II – Network & Cloud Security

Sr. Security Engineer

Sr. Security Engineer

Information Security Engineer II

Information Security Engineer II

Application Security Specialist

Application Security Specialist