– Application Security & Penetration Testing

Position: Application Security & Penetration Testing Specialist

Department: Information Security / Cybersecurity

Assignment Duration: 4 Months

Industry: IT / Technology / Information Security

Employment Type: Contract / Project Assignment

Location: Andheri Mumbai.

Job Summary

We are looking for an experienced Application Security & Penetration Testing professional for a 4-month project assignment. The role will focus on application security assessments, penetration testing, vulnerability identification, security testing across web/mobile/API environments, and providing actionable remediation recommendations.

Key Responsibilities

- Perform Application Security Assessments using Black Box, Grey Box, and White Box testing methodologies for web and enterprise applications.
- Conduct Mobile Application Security Testing for Android and iOS applications to identify security vulnerabilities.
- Perform API Security Testing covering authentication, authorization, data exposure, and API-specific security vulnerabilities.
- Execute Vulnerability Assessment and Penetration Testing (VAPT) across web applications, mobile applications, operating systems, and network infrastructure.
- Conduct SAST (Static Application Security Testing) and DAST (Dynamic Application Security Testing) to identify security flaws throughout the software development lifecycle.
- Support integration of security best practices into SDLC and DevSecOps processes.
- Assess applications against the OWASP Top 10 and recommend appropriate remediation measures.
- Utilize security tools such as Burp Suite, Nessus,



and Nmap for vulnerability assessment, penetration testing, and network discovery.
- Perform OS and Network VAPT to identify infrastructure vulnerabilities and security gaps.
- Prepare detailed vulnerability assessment and penetration testing reports, including risk ratings, Proof of Concepts (PoCs), technical findings, and remediation recommendations.
- Collaborate with development, infrastructure, DevOps, and security teams to validate and remediate identified vulnerabilities.
- Conduct vulnerability retesting to verify successful remediation.
- Maintain proper documentation of security findings, testing activities, and remediation status.
- Stay updated on emerging cybersecurity threats, vulnerabilities, attack techniques, and industry best practices.
- Contribute to continuous improvement of the organization's application security and overall security posture.

Required Technical Skills
- Web Application Security Testing
- Mobile Application Security – Android & iOS
- API Security Testing
- VAPT / Penetration Testing
- Black Box / Grey Box / White Box Testing
- SAST & DAST
- OWASP Top 10
- SDLC / Secure SDLC
- DevSecOps
- OS Security Testing
- Network Security & VAPT
- Vulnerability Assessment
- Risk Assessment & Risk Rating




- Vulnerability Remediation & Retesting
- Security Reporting & Documentation

Tools & Technologies Hands-on experience with security tools such as:
- Burp Suite
- Nessus
- Nmap
- Other relevant vulnerability assessment and penetration testing tools

Preferred Candidate Profile
- Bachelor's/Master's degree in Cybersecurity, Computer Science, Information Technology, or a related field.
- Hands-on experience in Application Security, VAPT, Penetration Testing, or Cybersecurity.
- Strong understanding of web, mobile, API, operating system, and network security.
- Good knowledge of OWASP Top 10 and common application security vulnerabilities.
- Strong analytical and problem-solving skills.
- Ability to document technical findings clearly and provide practical remediation recommendations.
- Positive communication and collaboration skills.

Key Deliverables
- Application security assessment reports
- Web, mobile, API, OS, and network VAPT reports
- Vulnerability identification and risk classification
- Proof of Concepts (PoCs)
- Remediation recommendations
- Vulnerability retesting reports
- Periodic security assessment status reports

Assignment Duration 4 Months – Application Security & Penetration Testing Project

Suitable Profiles

Application Security Engineer | Application Security Analyst | Penetration Tester | VAPT Engineer | Cybersecurity Analyst | Security Testing Engineer | Ethical Hacking Specialist | Information Security Analyst.

Pay: ₹50,000.00 - ₹55,000.00 per month

Work Location: In person

📌 Application Security & Penetration Testing (Andheri)
🏢 Long Shot Assignment
📍 Andheri