Application Penetration Tester

Accounting Resources, Inc.; Chennai; On-site; INR 1,400,000 - 2,200,000; Full time

Job summary

Accounting Resources, Inc. is seeking an experienced Application Penetration Tester / Web Application Security Engineer in Chennai, India.

With 5-8 years of experience, you will perform dynamic and static security testing across web, mobile, and API environments, conduct threat modeling, and collaborate with developers to remediate vulnerabilities. Candidate should have strong knowledge of OWASP Top 10, ASVS, and certifications like OSWE, GWAPT, or eWPTX.

Qualifications

• Identify security vulnerabilities within software applications throughout the development lifecycle.
• Conduct source code reviews and simulate targeted attacks on web, mobile, and API environments.
• Perform dynamic (DAST) and static (SAST) security testing on web and mobile applications.
• Evaluate the security of REST, GraphQL, and SOAP APIs.
• Review application architecture to identify potential security design flaws early.
• Partner with developers to provide actionable guidance on fixing vulnerabilities.

Responsibilities

• Identify security vulnerabilities within software applications throughout the development lifecycle.
• Conduct source code reviews and simulate targeted attacks on web, mobile, and API environments.
• App Testing: Perform dynamic (DAST) and static (SAST) security testing on web and mobile applications.
• API Assessment: Evaluate the security of REST, GraphQL, and SOAP APIs.
• Threat Modeling: Review application architecture to identify potential security design flaws early.
• Remediation Support: Partner directly with developers to provide actionable guidance on fixing vulnerabilities.

Skills

OWASP Top 10

ASVS

Burp Suite Pro

OWASP ZAP

Checkmarx

SonarQube

CI/CD pipeline

Software development workflows

Education

OSWE (OffSec Web Exploitation)

GWAPT

eWPTX

Tools

Burp Suite Pro

OWASP ZAP

Checkmarx

SonarQube

Job description

Job Title: Application Penetration Tester / Web Application Security Engineer

Experience: 5-8 Years

Notice: Immediate - 15 days

Education: B.E or B. Tech

Role Overview

Responsibilities

• Identify security vulnerabilities within software applications throughout the development lifecycle.
• Conduct source code reviews and simulate targeted attacks on web, mobile, and API environments.
• Key Responsibilities
• App Testing: Perform dynamic (DAST) and static (SAST) security testing on web and mobile applications.
• API Assessment: Evaluate the security of REST, GraphQL, and SOAP APIs.
• Threat Modeling: Review application architecture to identify potential security design flaws early.
• Remediation Support: Partner directly with developers to provide actionable guidance on fixing vulnerabilities.

Required Skills

• App Security: Deep understanding of the OWASP Top 10 and ASVS frameworks.
• Core Tools: Expert-level experience with tools like Burp Suite Pro, OWASP ZAP, Checkmarx, or SonarQube.
• Development Background: Strong understanding of software development workflows and CI/CD pipeline integration.
• Certifications: Specialized credentials such as OSWE (OffSec Web Exploitation), GWAPT, or eWPTX.