Application Security Penetration Tester

Persistent Systems; Pune District; Hybrid; INR 1,200,000 - 2,400,000; Full time

Benefits offered by this job

Group term life insurance

Personal accident coverage

Mediclaim hospitalization

Long Service awards

Flexible work hours

Hybrid work

Company-sponsored higher education

Accessibility-friendly office

Job summary

Persistent Systems is seeking an experienced Application Security Penetration Tester to assess web apps, APIs, and enterprise applications. You will combine manual and automated testing to identify vulnerabilities and guide remediation with detailed reports.

You will work with development and DevSecOps teams to strengthen security, validate fixes, and ensure adherence to industry standards and best practices.

Qualifications

• Bachelor's or Master's degree in Computer Science, AI/ML, Data Science, Engineering, or related discipline.
• 5-8 years of experience in AI/ML engineering, solution architecture, or advanced software engineering.
• Strong expertise in Generative AI, Agentic AI, and autonomous AI agents.
• Deep understanding of Large Language Models (LLMs) and enterprise AI applications.
• Hands-on experience designing and deploying AI-powered applications.
• Strong proficiency in Python 3.x and AI application development.
• Experience with LangChain, LangGraph, Semantic Kernel, CrewAI, AutoGen, LlamaIndex.
• Expertise in Retrieval-Augmented Generation (RAG) architectures.
• Experience integrating vector databases and knowledge retrieval systems.
• Strong understanding of AI orchestration, prompting strategies, and agent workflows.
• Experience designing scalable and secure AI architectures.
• Familiarity with machine learning pipelines and model lifecycle management.
• Strong analytical, architectural, and problem-solving skills.
• Excellent communication and stakeholder management capabilities.
• Experience working in Agile delivery environments.

Responsibilities

• Conduct end-to-end Web Application and API Penetration Testing engagements.
• Identify and validate security vulnerabilities based on OWASP Top 10, OWASP API Security Top 10, Secure Coding Best Practices.
• Perform both automated and manual security assessments.
• Test applications for Authentication vulnerabilities, Authorization flaws, Injection attacks, Broken Access Control, Security Misconfigurations, Sensitive Data Exposure, Session Management Weaknesses, API Security Risks.
• Perform vulnerability validation and eliminate false positives.
• Conduct remediation verification and retesting activities.
• Prepare detailed penetration testing reports with Vulnerability descriptions, Severity ratings, PoC, Business Impact, Risk Classification, Remediation Recommendations.
• Collaborate with development teams to explain findings and recommend fixes.
• Assist in risk assessment and security review activities.
• Contribute to improving application security standards and practices.

Skills

Web security testing

Penetration testing

OWASP Top 10

Automation & manual testing

Education

Bachelor's or Master's in Computer Science or related

Job description

We are seeking an experienced Application Security Penetration Tester to perform comprehensive security assessments of web applications, APIs, and enterprise applications. The ideal candidate will possess strong expertise in identifying, validating, and reporting security vulnerabilities through both manual and automated testing approaches. In this role, you will work closely with development, DevSecOps, and security teams to strengthen application security, validate remediations, and ensure adherence to industry security standards and best practices.

• Role: Application Security Penetration Tester
• Location: Pune
• Experience: Between 5 to 8 Years
• Job Type: Full Time Employment

What You'll Do:

• Conduct end-to-end Web Application and API Penetration Testing engagements.
• Identify and validate security vulnerabilities based on OWASP Top 10, OWASP API Security Top 10, Secure Coding Best Practices.
• Perform both automated and manual security assessments.
• Test applications for Authentication vulnerabilities, Authorization flaws, Injection attacks, Broken Access Control, Security Misconfigurations, Sensitive Data Exposure, Session Management Weaknesses, API Security Risks.
• Perform vulnerability validation and eliminate false positives.
• Conduct remediation verification and retesting activities.
• Prepare detailed penetration testing reports with Vulnerability descriptions, Severity ratings, Proof of Concept (PoC), Business Impact, Risk Classification, Remediation Recommendations.
• Collaborate with development teams to explain findings and recommend fixes.
• Assist in risk assessment and security review activities.
• Contribute to improving application security standards and practices.

Expertise You'll Bring:

• Bachelor's or Master's degree in Computer Science, Artificial Intelligence, Machine Learning, Data Science, Engineering, or a related discipline.
• 5-8 years of experience in AI/ML engineering, solution architecture, or advanced software engineering.
• Strong expertise in Generative AI, Agentic AI, and autonomous AI agents.
• Deep understanding of Large Language Models (LLMs) and enterprise AI applications.
• Hands-on experience designing and deploying AI-powered applications.
• Strong proficiency in Python 3.x and AI application development.
• Experience with frameworks such as LangChain, LangGraph, Semantic Kernel, CrewAI, AutoGen, LlamaIndex.
• Expertise in Retrieval-Augmented Generation (RAG) architectures.
• Experience integrating vector databases and knowledge retrieval systems.
• Strong understanding of AI orchestration, prompting strategies, and agent workflows.
• Experience designing scalable and secure AI architectures.
• Familiarity with machine learning pipelines and model lifecycle management.
• Strong analytical, architectural, and problem-solving skills.
• Excellent communication and stakeholder management capabilities.
• Experience working in Agile delivery environments.
• Competitive salary and benefits package
• Culture focused on talent development with quarterly growth opportunities and company-sponsored higher education and certifications
• Opportunity to work with cutting-edge technologies
• Employee engagement initiatives such as project parties, flexible work hours, and Long Service awards
• Insurance coverage: group term life, personal accident, and Mediclaim hospitalization for self, spouse, two children, and parents

Values-Driven, People-Centric & Inclusive Work Environment:

Persistent is dedicated to fostering diversity and inclusion in the workplace. We invite applications from all qualified individuals, including those with disabilities, and regardless of gender or gender preference. We welcome diverse candidates from all backgrounds.

• We support hybrid work and flexible hours to fit diverse lifestyles.
• Our office is accessibility-friendly, with ergonomic setups and assistive technologies to support employees with physical disabilities.
• If you are a person with disabilities and have specific requirements, please inform us during the application process or at any time during your employment.

"Persistent is an Equal Opportunity Employer and prohibits discrimination and harassment of any kind."