Application Penetration Tester

ControlCase, LLC; Mumbai; On-site; INR 800,000 - 2,000,000; Full time

Job summary

A cybersecurity firm in Mumbai is seeking an experienced Application Penetration Tester to perform application penetration testing, conduct source code reviews, and enhance security practices. Ideal candidates should have industry certifications and hands-on experience with relevant security tools. Join us to make applications stronger and safer.

Qualifications

• Required industry-leading certification like CEH, OSCP/SANS 25, LPT, CEPT, or equivalent.
• Hands-on experience with tools like Burp Suite, MobSF, Fortify, SonarQube (or similar).
• Good problem-solving mindset and clear communication skills.

Responsibilities

• Perform hands-on Web, Mobile, API, and Thick Client application penetration testing.
• Conduct Source Code Reviews to identify security flaws.
• Validate fixes and ensure vulnerabilities are resolved.

Skills

Application penetration testing

Source code review

Static analysis

CI/CD integration

Communication skills

Education

Industry-leading certification (CEH, OSCP/SANS 25, LPT, CEPT)

Tools

Burp Suite

MobSF

Fortify

SonarQube

Job description

Overview

You are here: Home / Careers / Application Penetration Tester

Are you passionate about breaking applications to make them stronger? We’re looking for a skilled Application Penetration Tester to join our team.

Multiple Positions:

• Application Penetration Tester – (2 to 3 Years)
• Application Penetration Tester – (5 to 6 Years)
• Application Penetration Tester – (7 to 9 Years)
• Source Code Review – (2 to 3 Years)
• Source Code Review – (5 to 6 Years)
• Source Code Review – (7 to 9 Years)

Responsibilities

• Perform hands-on Web, Mobile, API, and Thick Client application penetration testing
• Conduct Source Code Reviews to identify security flaws, coding errors, and compliance issues
• Perform static analysis and provide remediation recommendations based on best practices
• Validate fixes and ensure vulnerabilities are resolved without introducing new risks
• Analyze third-party libraries and dependencies for known vulnerabilities and licensing risks, and recommend secure upgrades
• Support integration of security tools into CI/CD pipelines
• Assist in risk assessment, threat modeling, and audit compliance
• Collaborate with development and security teams to enhance code quality and safety
• Document findings and communicating technical issues clearly to stakeholders
• Stay updated on emerging threats, tools, and industry standards

Qualifications

• Certifications – Required industry-leading certification like CEH, OSCP/SANS 25, LPT, CEPT, or equivalent.
• Hands-on experience with tools like Burp Suite, MobSF, Fortify, SonarQube (or similar)
• Good problem-solving mindset, clear communication skills, and the ability to prepare MIS reports.