Penetration Testing Lead, Application & API Security Role Summary Lead and manage end-to-end Application, API, and AI security assessments, ensuring high-quality delivery, effective stakeholder engagement, vulnerability remediation, governance reporting, and continuous service improvement. Security Assessment & Technical Leadership Lead Web Application, API, and AI security testing engagements. Perform and oversee vulnerability assessments, penetration testing, validation, and retesting activities. Review findings, risk ratings, and remediation recommendations. Ensure adherence to OWASP, NIST, PTES, OSSTMM, and industry best practices. Assessment management Manage assessment schedules, testing pipelines, deliverables, and SLAs. Coordinate with application owners, development teams, and business stakeholders. Ensure timely collection of prerequisites, credentials, scope, and application information. Serve as the primary technical point of contact for clients and internal teams. Reporting & Governance Review and approve penetration testing reports and executive summaries. Maintain vulnerability trackers, risk dashboards, and remediation status reports. Deliver Weekly Status Reports (WSR), MBRs, QBRs, and executive presentations. Track testing progress, risks, metrics, and service performance. Vulnerability Management Drive vulnerability remediation and retesting activities. Validate fixes and support secure remediation practices.



Monitor risk exposure and ensure timely closure of findings. Required Skills Web Application Penetration Testing API Security Testing (REST, SOAP, GraphQL) AI Security Assessments OWASP Top 10 & API Security Top 10 Vulnerability Management & CVSS Threat Modeling & Secure SDLC DevSecOps and Secure Coding Practices Cloud Security (Azure, AWS, GCP) Jira, ServiceNow, Burp Suite, OWASP ZAP, Nessus, Nmap, Metasploit, Postman Experience & Qualifications 8-12+ years of experience in Application Security, API Security, and Penetration Testing. 5+ years leading security assessment teams and client engagements. Experience in enterprise, consulting, managed services, or regulated industries. Solid communication, stakeholder management, and executive reporting skills. Team Leadership & Process Improvement Mentor and guide penetration testers and security consultants. Establish testing standards, methodologies, and quality practices. Drive continuous improvements in automation, reporting, and delivery processes. Support practice development, knowledge sharing, and capability enhancement. Preferred Certifications OSCP, OSWE, GWAPT, GPEN, CEH, CISSP, CREST, Security+, Azure/AWS Security Certifications. Key Deliverables Application, API, and AI Security Assessment Reports Executive Risk Dashboards and Governance Reports Vulnerability Tracking and Remediation Reports Retest Validation Reports Security Advisory and Improvement Recommendations

📌 TECHNICAL LEAD (Bengaluru)
🏢 Happiest Minds Technologies
📍 Bengaluru