Penetration Tester / Security Tester

Penetration Tester / Security Tester

We are looking for Penetration Tester / Security Tester to perform security assessments across web applications, APIs, cloud platforms, and infrastructure. The role focuses on identifying vulnerabilities, validating risks, and supporting remediation in collaboration with engineering and DevSecOps teams.

Key Responsibilities

• Conduct penetration testing on web applications, APIs, cloud environments, networks.
• Red teaming for Agentic AI
• Perform manual and automated security testing aligned with OWASP, NIST, and ISO 27001 standards
• Execute SAST and DAST scans and support CI/CD security integration
• Analyze findings using tools such as Burp Suite, OWASP ZAP, Nessus, Qualys, Nmap, and Metasploit
• Provide remediation guidance and prepare concise security assessment reports

BE

• 6+ years of hands-on experience in penetration testing or security testing
• Strong knowledge of application, cloud, and network security
• Experience with SAST tools such as SonarQube, Fortify, Checkmarx, Veracode, and Snyk
• Experience with DAST tools such as Burp Suite, OWASP ZAP, AppScan, and Acunetix
• Familiarity with OWASP Top 10, MITRE ATT&CK, and PTES
• Basic scripting knowledge in Python, Bash, PowerShell, or JavaScript

Certifications (Nice to Have)

• OSCP
• CEH
• GWAPT
• CISSP
• CISM
• AWS Certified Security – Specialty

6+ years