An AI agent that applies to roles like this on employers' own sites. 25 applications free, no card needed.
Posted over 15 days ago, so the role may have closed. Confirm on the employer's page when you apply, or see similar jobs.
Job Description
- 3+ years of hands-on experience in Penetration Testing / VAPT / Application Security.
- Strong knowledge of:
- Web Application Security
- API Security
- Network Security
- Infrastructure Security
- Windows & Linux Security
- Strong understanding of OWASP Top 10 and OWASP API Security Top 10.
- Hands-on experience with penetration-testing tools such as:
- Burp Suite
- Nmap
- Metasploit
- Wireshark
- Nessus / OpenVAS
- SQLMap
- Nikto
- Kali Linux
- Understanding of common vulnerabilities such as:
- SQL Injection
- XSS
- CSRF
- SSRF
- Command Injection
- Authentication/Authorization issues
- Privilege Escalation
- IDOR/BOLA
- Security Misconfiguration
- Insecure Deserialization
- Good understanding of TCP/IP, DNS, HTTP/HTTPS, VPN, firewalls, ports and network protocols.
- Ability to perform vulnerability validation and manual exploitation rather than relying only on automated scanners.
- Good scripting/programming knowledge in Python, Bash, PowerShell, or similar languages.
- Strong analytical and problem-solving skills.
- Ability to create clear technical security reports and communicate findings to engineering teams.
- Experience testing enterprise/security products, SaaS applications, endpoint solutions, VPN/ZTNA/VDI/virtualization platforms.
- Knowledge of virtualization technologies such as VMware, Hyper-V, or KVM.
- Experience with cloud security testing.
- Experience with source-code review / secure code review.
- Knowledge of Active Directory and Windows domain security.
- Experience with threat modeling and security assessment methodologies.
- Familiarity with CVSS scoring and CVE analysis.
- Experience with security automation and scripting.
- OSCP
- OSWE
- CEH
- eJPT
- PNPT
- CREST certifications
- Security+ or equivalent security certifications
- Strong communication skills(verbal and written both)
- Proactive
- Self-motivated
- Logical bent of mind (Analytical)
- Team player & quick learner
- Flexible/adaptable
- Multi-Tasking
- Excellent team player
- Perform Web Application, API, Network, and Infrastructure Penetration Testing.
- Conduct vulnerability assessments and penetration tests across Accops products and environments.
- Identify, validate, exploit, and document security vulnerabilities.
- Perform manual security testing in addition to automated vulnerability scanning.
- Test authentication, authorization, session management, access controls, encryption, input validation, and other security controls.
- Perform testing based on OWASP Top 10 and OWASP API Security Top 10.
- Conduct network and infrastructure security assessments including TCP/IP, DNS, HTTP/HTTPS, VPN, firewalls, and related technologies.
- Perform security testing of Windows and Linux environments.
- Assess vulnerabilities in APIs, web applications, services, endpoints, and network-facing components.
- Use penetration-testing tools to identify and validate vulnerabilities.
- Develop proof-of-concept exploits where required to demonstrate security impact.
- Perform vulnerability verification and re-testing after remediation.
- Prepare detailed penetration testing reports including:
- Vulnerability description
- Business/security impact
- Severity
- Proof of concept/evidence
- Affected components
- Recommended remediation
- Collaborate with developers and engineering teams to explain vulnerabilities and support remediation.
- Track vulnerabilities through their lifecycle and ensure appropriate closure.
- Stay updated on emerging vulnerabilities, CVEs, attack techniques, exploits, and security trends.
- Support security reviews and contribute to improving secure development practices.
Skills
PythonBashSQLLinuxTCP/IPDNSVPNPenetration TestingOWASPBurp SuiteNmapWiresharkEncryptionCommunicationTeamsIf a job posting appears fraudulent, asks for payment, contains misleading information, or violates our guidelines, please report it immediately. Our team will review it promptly, Jobaaj does not charge any fee from the applicants.
Similar Jobs
View allNew IT / Software Development & Related roles in Pune.
One email a day. Unsubscribe any time.

