Job Description

Penetration Tester

We are seeking a skilled Penetration Tester to join our agile security team in Chennai. The role involves conducting comprehensive penetration tests to identify and mitigate security vulnerabilities across various platforms. The ideal candidate will possess strong hands-on experience in vulnerability assessment and penetration testing, with a keen understanding of web application security, API security, and cloud environments. The role is crucial for safeguarding our digital assets and ensuring robust security posture.

Experience Required:

3 to 4 years

Key Responsibilities:

- Perform penetration testing of web applications.
- Conduct manual penetration testing of REST and GraphQL APIs.
- Carry out internal and external network penetration testing.
- Perform cloud penetration testing and security assessments.
- Conduct authenticated and unauthenticated penetration testing.
- Perform reconnaissance, enumeration, vulnerability discovery, validation, and exploitation.
- Identify authentication, authorization, access control, and business logic vulnerabilities.
- Identify and validate application security vulnerabilities and security misconfigurations.
- Perform API endpoint, parameter, token, authentication, and authorization testing.
- Assess network services, exposed systems, segmentation, and privilege escalation opportunities.




- Assess cloud IAM, permissions, exposed resources, configurations, and potential attack paths.

Qualification Criteria:

- Strong hands-on experience in Vulnerability Assessment and Penetration Testing (VAPT).
- Experience in web application penetration testing and manual security testing.
- Experience in REST/GraphQL API penetration testing.
- Experience in internal and external network penetration testing.
- Experience in cloud security assessment and penetration testing, preferably AWS.
- Ability to analyze and manually validate findings generated through automated and AI-assisted security assessments.
- Good understanding of OWASP Top 10, API security, authentication, authorization, and business logic vulnerabilities.
- Good understanding of networking, TCP/IP, DNS, HTTP/HTTPS, VPNs, firewalls, and network security concepts.
- Experience using automation and AI-assisted techniques to improve penetration testing coverage and efficiency.

Primary Skills:

- OWASP Top 10
- API Security
- Vulnerability Assessment

Key Skills:

- Burp Suite
- OWASP ZAP
- Nmap
- Nessus
- OpenVAS
- Nuclei
- Metasploit
- SQLMap
- Wireshark
- Invicti
- Wiz
- Mend.io
- TCP/IP
- DNS
- HTTP/HTTPS
- VPNs
- Firewalls
- Network Security
- Cloud Security
- Automation

📌 Penetration Tester (Chennai)
🏢 SPECTRUM TALENT MANAGEMENT
📍 Chennai