Job Description

About Persistent

We are an AI-led, platform-driven Digital Engineering and Enterprise Modernization partner, combining deep technical expertise and industry experience to help our clients anticipate what’s next. Our offerings and proven solutions create a unique competitive advantage for our clients by giving them the power to see beyond and rise above. We work with many industry-leading organizations across the world, including 20 Fortune 50 companies and 4 of the 5 top banks in both the US and India, and numerous innovators across the healthcare ecosystem.

Our disruptor’s mindset, commitment to client success, and agility to thrive in the dynamic setting have enabled us to sustain our growth momentum. Persistent has been recognized across top industry platforms for innovation, leadership, and inclusion. We reported $1,654.4M FY26 revenue with 17.4% Y-o-Y growth. We have delivered 24 sequential quarters of growth with $436.0M in Q4 FY26 revenue, up 3.2% Q-o-Q and 16.2% Y-o-Y growth. Our 27,500+ global team members, located in 18 countries, have been instrumental in helping the market leaders transform their industries. We have been recognized as the Fastest Growing IT Services Brand Globally in the 2026 Brand Finance IT Services 25 Report. We named a Leader in the Everest Group Private Equity (PE) Services PEAK Matrix® Assessment 2026 and Software Product Engineering PEAK Matrix® Assessment 2026.

About Position:

We are looking for a skilled VAPT Engineer / Application Security Engineer / Security Analyst to identify, assess, and help remediate security vulnerabilities across applications, APIs, networks, and enterprise infrastructure. The ideal candidate will have handson experience in vulnerability assessment, penetration testing, secure SDLC practices, and application security while working closely with development, DevOps, and product teams to improve the organization's overall security posture

-
Role: VAPT Engineer
- Location: Pune
- Experience: 5 to 8 years
- Job Type: Full-Time Employment

What You'll Do:

- Perform Vulnerability Assessments and Penetration Testing (VAPT) on web applications, APIs, networks, and infrastructure.
- Conduct manual security testing covering OWASP Top 10, SANS Top 25, and business logic vulnerabilities.




- Utilize automated security testing tools and validate findings to eliminate false positives
- Prepare detailed VAPT reports with risk ratings, attack scenarios, proof of concepts, and remediation recommendations.
- Re-test vulnerabilities after remediation to validate closure.
- Collaborate with developers, DevOps, and product teams during vulnerability triage and remediation activities.
- Support Secure SDLC initiatives including design reviews, threat modeling, and security sign-offs for releases.
- Participate in security assessments and compliance activities related to ISO 27001, SOC2, PCI-DSS, and other standards.
- Contribute to improving application, API, and infrastructure security across the organization.

Expertise You'll Bring:

- 3 to 5 years of handson experience in Vulnerability Assessment and Penetration Testing (VAPT), Application Security, or Cybersecurity.
- Strong understanding of OWASP Top 10, SANS Top 25, Web Security, API Security, and AI Security concepts.
- Handson experience with security testing tools such as Burp Suite, OWASP ZAP, Nessus, Qualys, OpenVAS, Nmap, and Metasploit.
- Experience performing web application, API, network, and infrastructure security assessments.
- Strong understanding of vulnerability management, risk assessment, and remediation processes.
- Ability to identify, validate, and exploit security vulnerabilities using manual and automated testing techniques.
- Experience creating detailed security assessment reports and remediation guidance.
- Ability to read and understand source code in at least one programming language such as Java, Python, JavaScript, or C#.
- Experience supporting Secure SDLC activities including threat modeling, design reviews, and release security assessments.
- Experience working in Agile, DevSecOps, or securityfocused development environments
- Knowledge of security compliance standards such as ISO 27001, SOC2, and PCI-DSS.
- Robust analytical,



troubleshooting, and problem-solving skills.
- Excellent communication and stakeholder management capabilities.
- CEH (Certified Ethical Hacker) certification.
- OSCP or OSWE certification.
- Knowledge of cloud security across AWS, Azure, and GCP.
- Experience with CI/CD security practices and DevSecOps implementations.
- Exposure to SAST, DAST, and application security testing tools.
- Familiarity with secure coding practices and security architecture concepts.
- Scripting and automation experience using Python, Bash, or PowerShell.
- Experience securing contemporary cloud-native and microservices-based applications.

Benefits:

- Competitive salary and benefits package
- Culture focused on talent development with quarterly growth opportunities and company-sponsored higher education and certifications
- Opportunity to work with cutting-edge technologies
- Employee engagement initiatives such as project parties, flexible work hours, and Long Service awards
- Annual health check-ups
- Insurance coverage group term life, personal accident, and Mediclaim hospitalization for self, spouse, two children, and parents

Values-Driven, People-Centric & Inclusive Work Environment:

Persistent is dedicated to fostering diversity and inclusion in the workplace. We invite applications from all qualified individuals, including those with disabilities, and regardless of gender or gender preference. We welcome diverse candidates from all backgrounds.

- We support hybrid work and flexible hours to fit diverse lifestyles.
- Our office is accessibilityfriendly, with ergonomic setups and assistive technologies to support employees with physical disabilities.
- If you are a person with disabilities and have specific requirements, please inform us during the application process or at any time during your employment

Let’s unleash your full potential at Persistent - persistent.com/careers

“Persistent is an Equal Opportunity Employer and prohibits discrimination and harassment of any kind.”

1

Open Positions

Vulnerability Assessment,Penetration Testing,Security testing

Skills Required

PUNE

Location

Vulnerability Assessment,Penetration Testing,Security testing

Desirable Skills

182330

Job Code

📌 Vapt Engineer (Pune)
🏢 Persistent
📍 Pune