Job Title: Application Penetration Tester / Web Application Security Engineer

Experience:
5-8 Years

Location:
Chennai (5Days WFO) Notice: Immediate
- 15 days

Education:
B.
E or B. Tech Role Overview Responsibilities
• Identify security vulnerabilities within software applications throughout the development lifecycle.
• Conduct source code reviews and simulate targeted attacks on web, mobile, and API environments.
•

Key Responsibilities
• App Testing: Perform dynamic (DAST) and static (SAST) security testing on web and mobile applications.
• API Assessment: Evaluate the security of REST, GraphQL, and SOAP APIs.
• Threat Modeling: Review application architecture to identify potential security design flaws early.
• Code Review: Conduct manual and automated secure code reviews (e.g.,



Java, Salesforce, Python, JavaScript, Go).
• Remediation Support: Partner directly with developers to provide actionable guidance on fixing vulnerabilities. Required Skills
• App Security: Deep understanding of the OWASP Top 10 and ASVS frameworks.
• Core Tools: Expert-level experience with tools like Burp Suite Pro, OWASP ZAP, Checkmarx, or SonarQube.
• Development Background: Robust understanding of software development workflows and CI/CD pipeline integration.
• Certifications: Specialized credentials such as OSWE (OffSec Web Exploitation), GWAPT, or eWPTX.

📌 Application Penetration Tester (Chennai)
🏢 ARi
📍 Chennai