Penetration Testing Lead, Application & API Security

Role Summary

Lead and manage end-to-end Application, API, and AI security assessments, ensuring high-quality delivery, effective stakeholder engagement, vulnerability remediation, governance reporting, and continuous service improvement.

Security Assessment & Technical Leadership

Lead Web Application, API, and AI security testing engagements.

Perform and oversee vulnerability assessments, penetration testing, validation, and retesting activities.

Review findings, risk ratings, and remediation recommendations.

Ensure adherence to OWASP, NIST, PTES, OSSTMM, and industry best practices.

Assessment management

Manage assessment schedules, testing pipelines, deliverables, and SLAs.

Coordinate with application owners, development teams, and business stakeholders.

Ensure timely collection of prerequisites, credentials, scope, and application information.

Serve as the primary technical point of contact for clients and internal teams.

Reporting & Governance

Review and approve penetration testing reports and executive summaries.

Maintain vulnerability trackers, risk dashboards, and remediation status reports.

Deliver Weekly Status Reports (WSR), MBRs, QBRs, and executive presentations.

Track testing progress, risks, metrics, and service performance.

Vulnerability Management

Drive vulnerability remediation and retesting activities.

Validate fixes and support secure remediation practices.





Monitor risk exposure and ensure timely closure of findings.

Required Skills

Web Application Penetration Testing

API Security Testing (REST, SOAP, GraphQL)

AI Security Assessments

OWASP Top 10 & API Security Top 10

Vulnerability Management & CVSS

Threat Modeling & Secure SDLC

DevSecOps and Secure Coding Practices

Cloud Security (Azure, AWS, GCP)

Jira, ServiceNow, Burp Suite, OWASP ZAP, Nessus, Nmap, Metasploit, Postman

Experience & Qualifications

8-12+ years of experience in Application Security, API Security, and Penetration Testing.

5+ years leading security assessment teams and client engagements.

Experience in enterprise, consulting, managed services, or regulated industries.

Solid communication, stakeholder management, and executive reporting skills.

Team Leadership & Process Improvement

Mentor and guide penetration testers and security consultants.

Establish testing standards, methodologies, and quality practices.

Drive continuous improvements in automation, reporting, and delivery processes.

Support practice development, knowledge sharing, and capability enhancement.

Preferred Certifications

OSCP, OSWE, GWAPT, GPEN, CEH, CISSP, CREST, Security+, Azure/AWS Security Certifications.

Key Deliverables

Application, API, and AI Security Assessment Reports

Executive Risk Dashboards and Governance Reports

Vulnerability Tracking and Remediation Reports

Retest Validation Reports

Security Advisory and Improvement Recommendations

📌 TECHNICAL LEAD - Penetration Testing (Bengaluru)
🏢 Happiest Minds Technologies
📍 Bengaluru