Job Title: Application Penetration Tester / Web Application Security Engineer

Experience: 5-8 Years

Location: Chennai (5Days WFO)

Notice: Immediate - 15 days

Education: B.E or B. Tech

Role Overview

Responsibilities

- Identify security vulnerabilities within software applications throughout the development lifecycle.
- Conduct source code reviews and simulate targeted attacks on web, mobile, and API environments.
- Key Responsibilities
- App Testing: Perform dynamic (DAST) and static (SAST) security testing on web and mobile applications.
- API Assessment: Evaluate the security of REST, GraphQL, and SOAP APIs.
- Threat Modeling: Review application architecture to identify potential security design flaws early.
- Code Review: Conduct manual and automated secure code reviews (e.g., Java,



Salesforce, Python, JavaScript, Go).
- Remediation Support: Partner directly with developers to provide actionable guidance on fixing vulnerabilities.

Required Skills

- App Security: Deep understanding of the OWASP Top 10 and ASVS frameworks.
- Core Tools: Expert-level experience with tools like Burp Suite Pro, OWASP ZAP, Checkmarx, or SonarQube.
- Development Background: Robust understanding of software development workflows and CI/CD pipeline integration.
- Certifications: Specialized credentials such as OSWE (OffSec Web Exploitation), GWAPT, or eWPTX.

📌 Application Penetration Tester (Chennai)
🏢 ARi
📍 Chennai