Role description

Contract Scope Responsibilities

Core Penetration Testing Conduct detailed penetration testing of web applications mobile applications thick clients cloudnative applications APIs and network environments using both automated tools and manual testing techniques

AILLM Security Testing Assess AI chatbots AI agents and Model Context Protocol MCPbased applications including risks introduced by AI systems and how those risks can be tested governed and reduced

Execute handson AI security test scenarios covering prompt injection jailbreaks harmful outputs sensitive data leakage tool misuse hallucination grounding failures and policy bypass

Design and run adversarial prompts to test model and guardrail robustness

Reporting Remediation Identify classify and prioritize vulnerabilities based on risk and business impact and prepare clear reports with findings evidence and proofofconcept details where applicable

Collaboration Delivery Support Work with internal security development and project teams to understand application functionality validate risks communicate findings and support remediation discussions within the agreed engagement scope

Stay current with emerging security threats vulnerabilities technologies and testing methodologies

Contribute to agreed security testing templates reporting formats methodologies and process documentation where required for the engagement

Required Contractor Profile

Bachelors degree in computer science information security or a related discipline

4 years of handson experience delivering vulnerability assessment and penetration testing engagements

Strong understanding of OWASP Top 10 around Web API LLM Agentic Apps MCP SANS Top 25 OSSTMM PTES and NIST standards





2 years of strong understanding and handson of common GenAI risks including prompt injection sensitive data leakage insecure output handling excessive agency hallucination and model misuse

Ability to write and execute structured AI security test cases

Handson experience with leading application security testing tools such as HCL AppScan and Burp Suite

Good conceptual understanding and practical handson experience with SAST DAST and other security testing approaches relevant to software development

Strong foundation in application architecture development practices and the software development lifecycle

Strong knowledge of secure software development principles including cryptography authentication mechanisms and security protocols

Relevant certifications such as OSCP OSWE or CEH are a plus

Strong English communication skills both written and verbal

Engagement Expectations

Strong communication and presentation skills with the confidence to engage effectively with stakeholders

Ability to work collaboratively and effectively with crossfunctional and geographically dispersed teams

Availability to support agreed engagement timelines and occasional coordination across global time zones as required

Selfdriven working style with the ability to deliver quality outputs independently and within agreed timelines





Ability to clearly document testing scope assumptions limitations evidence and recommendations for internal review

Skills

Mandatory Skills : Application Security - API Security testing, Application Security DAST & Penetration Testing - review/ Implementation/ Scanning/ Secure Code Review/ OWASP/ Remediation Advisor/ Secure SDLC

About LTM

LTM is an AI-centric global technology services company and the Business Creativity partner to the world’s largest and most disruptive enterprises. We bring human insights and intelligent systems together to help clients create greater value at the intersection of technology and domain expertise. Our capabilities span integrated operations, transformation, and business AI — enabling recent ways of working, new productivity paradigms, and new roads to value. Together with over 87,000 employees across 40 countries and our global network of partners, LTM — a Larsen & Toubro company — owns business outcomes for our clients, helping them not just outperform the market, but to Outcreate it. Please also note that neither LTM nor any of its authorized recruitment agencies/partners charge any candidate registration fee or any other fees from talent (candidates) towards appearing for an interview or securing employment/internship. Candidates shall be solely responsible for verifying the credentials of any agency/consultant that claims to be working with LTM for recruitment. Please note that anyone who relies on the representations made by fraudulent employment agencies does so at their own risk, and LTM disclaims any liability in case of loss or damage suffered as a consequence of the same.

Recruitment Fraud

Alert - https://www.ltm.com/careers/recruitment-fraud-alert

📌 Specialist - CyberSecurity (Bengaluru)
🏢 LTM
📍 Bengaluru