Job Summary

We are seeking a skilled and self-directed Senior Penetration Tester with 5+ years of experience to join AVEVAs Product Security team. The ideal candidate is a technically well-rounded skilled who can independently lead and execute penetration tests from scoping through final report delivery, with minimal oversight. This role demands breadth across attack surfaces including Web, APIs, OT, Mobile, as well as the depth to uncover complex vulnerabilities in both modern and legacy technology stacks.

Location

Preferred: Bangalore, India with hybrid ~40% office, ~60% remote.

Available alternatives: Hyderabad, Mumbai, or fully remote.

Employment type

Regular, full-time, hybrid work arrangement

Qualifications

Experience executing penetration tests independently

Key responsibilities

- Use a risk-based approach to rapidly identify the highest impactissues

- Articulate technical and business risk of discovered issues

- Coordinate security assessments with external service providers

- Contribute to development of testing methodology, playbooks, and tooling

Essential requirements

- Ability to plan, scope and independently execute end-to-end penetration tests

- Experience producing high-quality reports with reproducible evidence and proof-of-concepts

- Experience working directly with product teams during test and retest phases

- Ability to provide actionable remediation and mitigation guidance aligned with industry practices

- Frontier knowledge in state-of-the-art penetration testing techniques relevant to the evolving threat landscape

Desired skills and competencies

- One or more relevant certifications (e.g. CEH,



OSCP, GWAPT, or HTB)

- Penetration testing of Web Applications, Web APIs, and Industrial software targets

- Experience testing API protocols such as REST, gRPC, GraphQL, WebSocket

- Established application security community presence (e.g. blog, presentations, attributed CVEs)

- Experience using penetration testing tools such as Burp Suite Pro, SQLMap, SysInternals

Rd at AVEVA

Our track record of innovation is no fluke its the result of a structured and deliberate focus on learning, collaboration and inclusivity. If you want to build applications that solve big problems and do impactful work, join us!

Hybrid working

We work in a hybrid way at AVEVA. Most roles are based at a local AVEVA office, with an expectation of being on-site 50% of your working hours to support collaboration and connection. Some positions are fully office-based depending on the nature of the work, and certain roles that support specific customers or markets may be remote. The working arrangement for this position will be confirmed during the hiring process.

Role: Security Testing Engineer,

Industry Type: Software Product,

Department: Engineering - Software & QA,

Employment Type: Full Time, Permanent

Role Category: Quality Assurance and Testing

Education

UG: Any Graduate

PG: Any Postgraduate read more

Key Skills

Skills highlighted with ‘‘ are preferred keyskills api protocols apisapplication securityarticulateburp suitebusiness strategycehchemicalsfrontiergraphqlgrpcindustrial softwareoperationsoscpotpenetration testingproduct securityrecruiterweb apisweb applications

📌 Senior Penetration Tester (Hyderabad)
🏢 Aveva
📍 Hyderabad