Title-Pentration Testing

Experience - 3-4 years

Location- Chennai

Strong hands-on experience in Vulnerability Assessment and Penetration Testing

(VAPT).

Experience in web application penetration testing and manual security testing.

Experience in REST/GraphQL API penetration testing.

Experience in internal and external network penetration testing.

Experience in cloud security assessment and penetration testing, preferably AWS.

Experience In Identifying, Validating, Exploiting, And Reporting Security Vulnerabilities.

Solid understanding of OWASP Top 10, API security, authentication, authorization, and business logic vulnerabilities.

Good understanding of networking, TCP/IP, DNS, HTTP/HTTPS, VPNs, firewalls, and network security concepts.

Experience with vulnerability assessment and manual validation of security findings.

Experience with vulnerability chaining and attack-path analysis.

Experience with security testing of mobile applications is an added advantage.

Experience with endpoint and server security assessment is an added advantage.

Familiarity with CVE, CWE, CVSS, OWASP, and common vulnerability classifications.

Experience using automation and AI-assisted techniques to improve penetration testing coverage and efficiency.

Ability to analyze and manually validate findings generated through automated and

AI-assisted security assessments.

Good understanding of security risk assessment, vulnerability remediation, and retesting.

Tools

Burp Suite, OWASP ZAP, Nmap, Nessus, OpenVAS, Nuclei, Metasploit, SQLMap,

Wireshark, Invicti, Wiz, Mend.io

Responsibilities

Perform penetration testing of web applications.

Perform manual penetration testing of REST and GraphQL APIs.

Conduct internal and external network penetration testing.

Perform cloud penetration testing and security assessments.

Conduct authenticated and unauthenticated penetration testing.

Perform reconnaissance, enumeration, vulnerability discovery, validation,



and exploitation.

Identify authentication, authorization, access control, and business logic vulnerabilities.

Identify and validate application security vulnerabilities and security misconfigurations.

Perform API endpoint, parameter, token, authentication, and authorization testing.

Assess network services, exposed systems, segmentation, and privilege escalation opportunities.

Assess cloud IAM, permissions, exposed resources, configurations, and potential attack paths.

Perform vulnerability chaining and attack-path analysis to demonstrate real-world security impact.

Perform manual testing to identify vulnerabilities that may not be detected through automated assessments.

Validate and verify vulnerabilities identified through automated security assessments.

Use AI-assisted penetration testing techniques for reconnaissance, test-case generation,

vulnerability analysis, and attack-path identification.

Analyze and manually validate AI-generated findings before reporting.

Assess vulnerability severity, exploitability, business impact, and overall risk.

Prepare detailed penetration testing and VAPT reports with technical evidence, impact,

and remediation recommendations.

Communicate Identified Vulnerabilities And Remediation Requirements With Development,

infrastructure, cloud, and security teams.

Perform remediation verification and penetration testing retests.

Support security risk assessments and vulnerability remediation activities.

Research emerging vulnerabilities, attack techniques, exploitation methodologies, and

AI-assisted penetration testing approaches.

Stay updated on emerging security threats, vulnerabilities, penetration testing methodologies, and industry security standards.

Maintain proper documentation of penetration testing activities, findings, evidence, and remediation status.

Ensure all penetration testing activities are performed within approved scope and organizational security policies.

Service ticket review and approvals to ensure BAU

📌 Pentration Tester (Chennai)
🏢 SWITS DIGITAL Private
📍 Chennai