Senior Penetration Tester

AVEVA; Cambridgeshire and Peterborough; On-site; GBP 23,000 - 47,000; Full time

Benefits offered by this job

Gratuity

Medical insurance

Leave entitlement

Emergency leave

Childcare support

Maternity leave

Paternity leaves

Education assistance

Home office setup

Well-being support

Job summary

AVEVA is seeking a highly skilled Senior Penetration Tester to join its Product Security team. The role requires leading and executing penetration tests across Web, APIs, OT, and mobile, with the ability to deliver scoping through final reports with minimal oversight.

The candidate should demonstrate breadth across attack surfaces and depth to uncover complex vulnerabilities in modern and legacy stacks, with 5+ years of experience and relevant certifications preferred.

Qualifications

• Experience planning and executing end-to-end penetration tests independently.
• Ability to produce high-quality reports with reproducible evidence and PoCs.
• Experience working with product teams during test and retest phases.

Responsibilities

• Use a risk-based approach to identify high-impact issues.
• Articulate technical and business risk of findings.
• Coordinate security assessments with external service providers.
• Contribute to testing methodology, playbooks, and tooling development.

Skills

Penetration testing

Independent testing

Web APIs

OT testing

REST testing

gRPC testing

GraphQL testing

Tools

Burp Suite Pro

SQLMap

SysInternals

Job description

AVEVA is creating software trusted by over 90% of leading industrial companies.

Position: R&D Senior Member of Technical Staff - Product Security - Penetration Testing

Qualifications: Experience executing penetration tests independently

Location: Preferred: Bangalore, India with hybrid ~40% office, ~60% remote. Available alternatives: Hyderabad, Mumbai, or fully remote. Employment type: Regular, full-time, hybrid work arrangement

The Job

We are seeking a skilled and self-directed Senior Penetration Tester with 5+ years of experience to join AVEVA’s Product Security team. The ideal candidate is a technically well-rounded professional who can independently lead and execute penetration tests from scoping through final report delivery, with minimal oversight. This role demands breadth across attack surfaces including Web, APIs, OT, Mobile, as well as the depth to uncover complex vulnerabilities in both modern and legacy technology stacks.

Key responsibilities

• Use a risk-based approach to rapidly identify the highest impact issues
• Articulate technical and business risk of discovered issues
• Coordinate security assessments with external service providers
• Contribute to development of testing methodology, playbooks, and tooling

Essential requirements

• Ability to plan, scope and independently execute end-to-end penetration tests
• Experience producing high-quality reports with reproducible evidence and proof-of-concepts
• Experience working directly with product teams during test and retest phases
• Ability to provide actionable remediation and mitigation guidance aligned with industry practices
• Frontier knowledge in state-of-the-art penetration testing techniques relevant to the evolving threat landscape

Desired skills and competencies

• One or more relevant certifications (e.g. CEH, OSCP, GWAPT, or HTB)
• Penetration testing of Web Applications, Web APIs, and Industrial software targets
• Experience testing API protocols such as REST, gRPC, GraphQL, WebSocket
• Established application security community presence (e.g. blog, presentations, attributed CVE’s)
• Experience using penetration testing tools such as Burp Suite Pro, SQLMap, SysInternals.

R&D at AVEVA

Our global team of 2000+ developers work on an incredibly diverse portfolio of over 75 industrial automation and engineering products, which cover everything from data management to 3D design. AI and cloud are at the centre of our strategy, and we have over 150 patents to our name.

Our track record of innovation is no fluke – it’s the result of a structured and deliberate focus on learning, collaboration and inclusivity. If you want to build applications that solve big problems and do impactful work, join us!

India Benefits include:

• Gratuity
• Medical and accidental insurance
• very attractive leave entitlement
• emergency leave days
• childcare support
• maternity
• paternity and adoption leaves
• education assistance program
• home office set up support (for hybrid roles)
• well-being support

It’s possible we’re hiring for this position in multiple countries, in which case the above benefits apply to the primary location. Specific benefits vary by country, but our packages are similarly comprehensive.

Find out more: aveva.com/en/about/careers/benefits/

Hybrid working

We work in a hybrid way at AVEVA. Most roles are based at a local AVEVA office, with an expectation of being on-site 50% of your working hours to support collaboration and connection. Some positions are fully office-based depending on the nature of the work, and certain roles that support specific customers or markets may be remote. The working arrangement for this position will be confirmed during the hiring process.

Hiring process

Find out more: aveva.com/en/about/careers/hiring-process

About AVEVA

AVEVA is a global leader in industrial software with more than 6,500 employees in over 40 countries. Our cutting-edge solutions are used by thousands of enterprises to deliver the essentials of life – such as energy, infrastructure, chemicals, and minerals – safely, efficiently, and more sustainably.

We are committed to embedding sustainability and inclusion into our operations, our culture, and our core business strategy. Learn more about how we are progressing against our ambitious 2030 targets: sustainability-report.aveva.com/

Find out more: avea.com/en/about/careers/

AVEVA requires all successful applicants to undergo and pass a drug screening and comprehensive background check before they start employment. Background checks will be conducted in accordance with local laws and may, subject to those laws, include proof of educational attainment, employment history verification, proof of work authorization, criminal records, identity verification, credit check. Certain positions dealing with sensitive and/or third-party personal data may involve additional background check criteria.

AVEVA is an Equal Opportunity Employer. We are committed to being an exemplary employer with an inclusive culture, developing a workplace environment where all our employees are treated with dignity and respect.

We value diversity and the expertise that people from different backgrounds bring to our business.

AVEVA provides reasonable accommodation to applicants with disabilities where appropriate.

If you need reasonable accommodation for any part of the application and hiring process, please notify your recruiter. Determinations on requests for reasonable accommodation will be made on a case-by-case basis.