This job is with Standard Chartered Bank, an inclusive employer and a member of myGwork – the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly.

Job Summary

We are seeking talented and motivated individuals for the role of Senior Manager / Lead Penetration Testing. Provide deep, hands-on penetration testing expertise for Distributed Ledger Technology (DLT), blockchain, smart contract and API-based solutions. The role independently identifies exploitable security weaknesses, translates technical findings into business risk, and works closely with developers, architects, platform teams and security stakeholders to remediate issues. The role also brings current cyber-security and blockchain industry insight, uses AI-assisted security testing responsibly, applies extensive Java engineering skills to build security and QA automation frameworks, helps QA teams accelerate maintainable test automation, and includes the wider team in technical decisions through evidence-based recommendations and recognised best practices.

Key Responsibilities

Strategy and Technical Leadership
• Act as a senior individual contributor and subject-matter expert for penetration testing across smart contracts, APIs, web applications, blockchain platforms and supporting infrastructure.
• Define risk-based penetration-test approaches covering black-box, grey-box and authenticated testing, aligned to system criticality, threat models and regulatory expectations.
• Maintain deep awareness of emerging cyber threats, blockchain vulnerabilities, attack techniques, defensive controls and relevant industry developments.
• Assess new tools and testing techniques, including AI-assisted approaches,



and recommend adoption based on effectiveness, safety, explainability and control requirements.
• Bring engineers, security specialists and relevant team members into technical decisions, clearly presenting options, evidence, trade-offs and recommended practices.
Security Testing and Assurance
• Plan and execute end-to-end penetration testing of smart contracts, REST and event-driven APIs, web services, microservices, blockchain nodes, wallets, key-management integrations and supporting cloud or container platforms.
• Conduct manual and automated smart contract security testing, including source-code review, static and energetic analysis, fuzzing, invariant testing and, where appropriate, formal-verification techniques.
• Use smart contract security tools hands-on, including Slither for static analysis, Mythril and Manticore for symbolic execution, Foundry and Echidna for fuzzing and invariant testing, and Certora for formal verification, selecting tools according to the assurance objective and validating all outputs manually.
• Create and maintain custom Slither detectors, Foundry test suites, Echidna properties and reusable smart contract security test harnesses where standard rules are insufficient.
• Test for blockchain-specific weaknesses such as reentrancy, access-control failures, oracle manipulation, front-running or MEV exposure, flash-loan abuse,



unchecked external calls, upgradeability weaknesses, denial of service and cross-chain trust failures.
• Perform API testing covering authentication and authorisation, object-level and function-level access controls, token and session handling, input validation, injection, rate limiting, business-logic abuse, sensitive-data exposure and service-to-service trust.
• Assess common application, network and platform weaknesses using manual exploitation and appropriate tooling, while ensuring testing is authorised, controlled and non-disruptive.
• Validate identified weaknesses, establish realistic attack paths and distinguish exploitable risk from tool-generated noise or false positives. ge and efficiency without weakening professional judgement or accountability.

AI-assisted Penetration Testing
• Use approved AI-enabled security tools to accelerate attack-surface discovery, test-case generation, code and smart-contract review, payload variation, evidence analysis and report preparation.
• Apply human validation to all AI-generated findings and recommendations; protect confidential information and ensure use remains within authorised testing scope and organisational policy.
• Explore how adversaries may use AI to find, chain or exploit weaknesses, and incorporate relevant scenarios into controlled security assessments.
• Develop repeatable automation and AI-assisted workflows that improve coverage and efficiency without weakening professional judgement or accountability.
Java Engineering and Automation Development
• Demonstrate extensive hands-on coding experience in Java, including strong knowledge of object

📌 Lead, Penetration Testing (Bengaluru)
🏢 Standard Chartered Bank
📍 Bengaluru