Aptean is seeking a Senior Penetration Tester with robust DevSecOps expertise to play a dual-role in our offensive security and secure development lifecycle initiatives. You will lead advanced penetration testing engagements, red team operations, and threat simulations across enterprise settings while also driving secure software practices by integrating security into CI/CD pipelines. This role blends deep offensive security capabilities with hands-on DevSecOps implementation, contributing to both proactive and preventative cybersecurity postures.
Key Responsibilities:
Offensive Security & Penetration Testing
Lead and perform advanced penetration testing across:
Web, mobile (iOS/Android), and desktop/thick client applications
APIs (REST, GraphQL, SOAP) with focus on business logic vulnerabilities
Internal/external networks and hybrid infrastructure (on-prem and cloud)
Execute red team engagements simulating real-world adversaries (APT-style)
Targeting Windows Active Directory, Linux systems, and cloud platforms (AWS, Azure, GCP)
Employing post-exploitation,



lateral movement, and persistence techniques
Build and maintain offensive infrastructure (C2 servers, phishing platforms)
Develop proof-of-concept exploits and adversary emulation scenarios
Deploy and monitor honeypots/honeynets for threat detection and behavior analysis

DevSecOps & Secure SDLC
Integrate security tools (SAST, DAST, SCA, IaC scanning) into CI/CD pipelines (GitHub Actions, Jenkins, GitLab CI/CD)
Automate security testing and policy enforcement in the development lifecycle
Collaborate with DevOps and developers to implement secure coding practices and remediation workflows
Build custom scripts/tools for security automation (Python, Bash, PowerShell)
Monitor and harden containerized and cloud-native infrastructure (Docker, Kubernetes, serverless)
Support security gate controls and compliance checks across release pipelines

Reporting, Documentation & Communication

📌 Associate Architect, Information Security Bengaluru
🏢 Aptean
📍 Bengaluru