API Security Testing

I am in my internship as a cybersecurity engineer, I was tasked with testing the API for one of the company's mobile application. They use Postman for their API management, they want the test to run on Postman. I am very new at this, any tips hints resources or anything at all that can guide me ? For now the things that I managed to figure out was that I can start off with testing the OWASP top 10 API …

api api management api security api security testing api vulnerabilities application cybersecurity engineer guide lost managed management mobile mobile application owasp owasp top 10 owasp top 10 api postman resources run scripts security security testing start test testing the company things tips top 10 vulnerabilities