We are looking for an experienced Penetration Tester to perform comprehensive security assessments across web, API, mobile, and thick-client applications. The role requires strong hands-on expertise in manual penetration testing , vulnerability assessment, and secure configuration reviews, along with the ability to clearly communicate risks to technical and business stakeholders.
What You'll Do
- Conduct manual and automated application security testing for Web, API, and Thick Client applications.
- Perform manual penetration testing using OWASP methodologies and checklists.
- Execute DAST assessments covering OWASP Top 10 vulnerabilities.
- Perform manual source code reviews to identify security flaws.
- Conduct Mobile Application VAPT (both Static and Dynamic analysis).
- Carry out security configuration reviews and vulnerability assessments.
- Prepare detailed security assessment reports with risk ratings and remediation guidance.
- Effectively explain identified vulnerabilities and business impact to non-technical stakeholders.
What We're Looking For
- 3 to 7 years of experience conducting Application Security assessments
- Experienced in conducting Manual and Automated DAST for Web, API & Thick client covering OWASP Top 10
- Experienced in conducting Manual code review
- Experienced in Mobile VAPT (Both static and Energetic)
- Knowledge of Infra VAPT or at least VA and configuration review
- Knowledge in Container / Docker security / Cloud Audit is a plus
- Certifications such as CEH, CRTP, OSCP are preferred
- Good communication skills, ability to explain vulnerabilities to business users in simple terms.
Core Skills
- Manual Penetration Testing using OWASP methodologies and checklists
- Application Penetration Testing (Web, API, Thick Client)
- OWASP Top 10
- Security Configuration Review