Role Description The Senior Web Application Penetration Tester is a full-time, on-site role based in the Pune District. This role involves planning, executing, and documenting penetration tests on web applications, APIs, and related infrastructure to identify security weaknesses and recommend remediation steps. Daily responsibilities include threat modeling, vulnerability assessment, exploit development where appropriate, and collaborating with development and operations teams to improve secure coding and deployment practices.

The person in this role will create clear technical and executive-level reports, participate in security reviews, contribute to internal testing methodologies, and mentor junior team members. The role also involves staying current with emerging threats, tools, and techniques, and supporting red team exercises and broader cybersecurity initiatives.

Qualifications

- Strong application security skills, including secure web application architecture, common vulnerabilities (e.g., OWASP Top 10), and secure coding principles.
- Hands-on cybersecurity experience, including vulnerability assessment,



penetration testing methodologies, and incident response fundamentals.
- Proficiency in reverse engineering and malware analysis for understanding complex threats and custom exploits.
- Experience with red teaming activities, adversary simulation, and advanced offensive security techniques.
- Practical knowledge of common web technologies and stacks (HTTP, REST APIs, JavaScript, SQL/NoSQL, modern frameworks) and related security controls.
- Familiarity with industry tools such as Burp Suite, OWASP ZAP, Metasploit, Nmap, Wireshark, and scripting in languages like Python, Bash, or PowerShell.
- Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent practical experience; relevant certifications (e.g., OSCP, OSWE, GWAPT, CEH) are an advantage.
- Ability to produce explicit technical documentation and concise reports for both technical and non-technical stakeholders, and to collaborate effectively within cross-functional teams.

📌 Senior web application penetration tester (Maharashtra)
🏢 Athena Cybercraft Aegis
📍 Maharashtra