Security Penetration Tester

Department Icon IT / Software Development & Related
Posted: 1 month ago
2-5 years
Pune, India
IT / Software Development & Related
work from office
Full Time
Closes 4 Dec 2026

Posted: 1 month ago
Let Jobaaj One apply for you

An AI agent that applies to roles like this on employers' own sites. 25 applications free, no card needed.

Job Description
Similar Jobs
Please verify your account first! Send OTP

Posted over 15 days ago, so the role may have closed. Confirm on the employer's page when you apply, or see similar jobs.

Job Description

Technical Skills Required Mandatory:
  • 3+ years of hands-on experience in Penetration Testing / VAPT / Application Security.
  • Strong knowledge of:

    • Web Application Security
    • API Security
    • Network Security
    • Infrastructure Security
    • Windows & Linux Security
  • Strong understanding of OWASP Top 10 and OWASP API Security Top 10.
  • Hands-on experience with penetration-testing tools such as:

    • Burp Suite
    • Nmap
    • Metasploit
    • Wireshark
    • Nessus / OpenVAS
    • SQLMap
    • Nikto
    • Kali Linux
  • Understanding of common vulnerabilities such as:

    • SQL Injection
    • XSS
    • CSRF
    • SSRF
    • Command Injection
    • Authentication/Authorization issues
    • Privilege Escalation
    • IDOR/BOLA
    • Security Misconfiguration
    • Insecure Deserialization
  • Good understanding of TCP/IP, DNS, HTTP/HTTPS, VPN, firewalls, ports and network protocols.
  • Ability to perform vulnerability validation and manual exploitation rather than relying only on automated scanners.
  • Good scripting/programming knowledge in Python, Bash, PowerShell, or similar languages.
  • Strong analytical and problem-solving skills.
  • Ability to create clear technical security reports and communicate findings to engineering teams.
Good To have:
  • Experience testing enterprise/security products, SaaS applications, endpoint solutions, VPN/ZTNA/VDI/virtualization platforms.
  • Knowledge of virtualization technologies such as VMware, Hyper-V, or KVM.
  • Experience with cloud security testing.
  • Experience with source-code review / secure code review.
  • Knowledge of Active Directory and Windows domain security.
  • Experience with threat modeling and security assessment methodologies.
  • Familiarity with CVSS scoring and CVE analysis.
  • Experience with security automation and scripting.
Certifications – Preferred
One or more of the following certifications would be an       advantage:
    • OSCP
    • OSWE
    • CEH
    • eJPT
    • PNPT
    • CREST certifications
    • Security+ or equivalent security certifications
Soft Skills Required

  • Strong communication skills(verbal and written both)
  • Proactive
  • Self-motivated
  • Logical bent of mind (Analytical)
  • Team player & quick learner
  • Flexible/adaptable
  • Multi-Tasking
  • Excellent team player

Role and Responsibilities:
  • Perform Web Application, API, Network, and Infrastructure Penetration Testing.
  • Conduct vulnerability assessments and penetration tests across Accops products and environments.
  • Identify, validate, exploit, and document security vulnerabilities.
  • Perform manual security testing in addition to automated vulnerability scanning.
  • Test authentication, authorization, session management, access controls, encryption, input validation, and other security controls.
  • Perform testing based on OWASP Top 10 and OWASP API Security Top 10.
  • Conduct network and infrastructure security assessments including TCP/IP, DNS, HTTP/HTTPS, VPN, firewalls, and related technologies.
  • Perform security testing of Windows and Linux environments.
  • Assess vulnerabilities in APIs, web applications, services, endpoints, and network-facing components.
  • Use penetration-testing tools to identify and validate vulnerabilities.
  • Develop proof-of-concept exploits where required to demonstrate security impact.
  • Perform vulnerability verification and re-testing after remediation.
  • Prepare detailed penetration testing reports including:
  • Vulnerability description
  • Business/security impact
  • Severity
  • Proof of concept/evidence
  • Affected components
  • Recommended remediation
  • Collaborate with developers and engineering teams to explain vulnerabilities and support remediation.
  • Track vulnerabilities through their lifecycle and ensure appropriate closure.
  • Stay updated on emerging vulnerabilities, CVEs, attack techniques, exploits, and security trends.
  • Support security reviews and contribute to improving secure development practices.

Skills

PythonBashSQLLinuxTCP/IPDNSVPNPenetration TestingOWASPBurp SuiteNmapWiresharkEncryptionCommunicationTeams

If a job posting appears fraudulent, asks for payment, contains misleading information, or violates our guidelines, please report it immediately. Our team will review it promptly, Jobaaj does not charge any fee from the applicants.

Similar Jobs

View all
Loading...
Bag Logo
Jobaaj
Get jobs like this by email

New IT / Software Development & Related roles in Pune.

Job Alert
Google hiring for Specific Roles Apply Now!
1 min ago
New Opportunity
Amazon is hiring freshers Apply Now!
5 min ago
Featured Jobs
Microsoft opening 50+ positions Apply Now!
10 min ago

One email a day. Unsubscribe any time.