Company Name: VARITE India Private Limited

About The Client:

KPMG is one of the world’s leading qualified services firms and the fastest growing Big Four accounting firm

Essential Job Functions:

- Defines and leads the execution of highly technical penetration tests and security assurance engagements that deliver value by independently performing hands-on, detailed technical tests without requiring supervision.
- Owns the design of new technical testing engagements to best serve the current and future needs of the organization, being able to adapt industry best practices to the local technical and cultural environment.
- Owns the responsibility to ensure that the budget allocated to pentesting activities performed by external vendors delivers the necessary value and results in a good return on investment.
- Actively contributes to the mid- and long-term security assurance strategic plan definition by introducing domain expertise insights and ensuring the plan is effective and impactful.
- Grows the security assurance area of focus within security by understanding the current and target security posture of the business and identifying the skills and resources needed to effectively deliver on those needs.
- Mentors junior and core penetration testers, driving their career growth within this highly specialized technical craft.
- Provides deep technical expertise to the business in the following highly specialized domains:

- Threat Modeling
- Web Application / API Penetration Testing
- Mobile Application Penetration Testing
- Infrastructure and Cloud Penetration Testing
- Purple Team Assessments
- AI/ML-Powered Systems (including LLMs and AI-assisted developer tooling)
- Identifying and exploiting AI-specific threats such as Prompt Injection, Data Poisoning, and Model Abuse
- Provides guidance and recommendations to teams, taking into account the current state of their technical environment, their future roadmap and strategy, and the risk associated with the underlying findings and vulnerabilities.




- Keeps up to date with the latest developments in vulnerabilities and threats within their domain of expertise, including AI/ML-related attack techniques, using this to assess the security posture of the organization against new trends and attacks.
- Drives and coordinates multi-disciplined teams (including internal testers, external contractors, and engagement managers) to conduct and successfully deliver penetration testing engagements of systems and services.
- Drives the reporting of penetration test outcomes by drafting, disseminating, and presenting them to technical and non-technical stakeholders at multiple levels, from junior analysts to leadership teams.
- Collaborates and coordinates with cross-functional technical and non-technical stakeholders to achieve successful testing engagements that deliver critical security value.
- Supports the cross-brand security assurance program by engaging with key security personnel ranging from CISOs to engineers.
- Mentors and trains non-penetration testers, such as developers and other technical roles, on relevant aspects of penetration testing and vulnerability identification to scale security impact across the organization.

Qualifications:

- Strong experience leading and executing penetration testing and security assurance engagements.
- Expertise in Threat Modeling, Application Security Testing, Infrastructure Security Testing, and Cloud Security Assessments.
- Experience performing Web Application, API, Mobile Application, Infrastructure, and Cloud Penetration Testing.
- Knowledge of Purple Team exercises and advanced security validation methodologies.
- Understanding of AI/ML security risks including Prompt Injection, Data Poisoning, Model Abuse,



and AI-assisted development environments.
- Experience managing external security testing vendors and ensuring return on investment.
- Strong stakeholder management, communication, and presentation skills.
- Experience creating technical reports and presenting findings to both technical and executive audiences.
- Ability to mentor junior team members and drive security capability growth.
- Strong understanding of security vulnerabilities, exploitation techniques, risk assessment, and remediation strategies.

How to Apply: Interested candidates are encouraged to respond/submit their updated resumes, and for additional job opportunities, please visit

Unlock Rewards: Refer Candidates and Earn.
If you're not available or interested in this opportunity, please pass this along to anyone in your network who might be a good fit and interested in our open positions. VARITE offers a Candidate Referral program, where you'll receive a one-time referral bonus based on the following scale if the referred candidate completes a three-month assignment with VARITE.

Experience Level Bonus Referral: 0-2 years INR 5,000
2-6 years INR 7,500
6+ years INR 10,000

About VARITE: VARITE is a global staffing and IT consulting company providing technical consulting and team augmentation services to Fortune 500 Companies in USA, UK, CANADA and INDIA. VARITE is currently a primary and direct vendor to the leading corporations in the verticals of Networking, Cloud Infrastructure, Hardware and Software, Digital Marketing and Media Solutions, Clinical Diagnostics, Utilities, Gaming and Entertainment, and Financial Services.

Equal Opportunity Employer:
VARITE is an equal chance employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. We do not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, marital status, veteran status, or disability status.

📌 Senior_Penetration_Tester (Bengaluru)
🏢 VARITE
📍 Bengaluru