Application Security Penetration Tester

Mployee.me; Pune District; Hybrid; INR 2,000,000 - 3,500,000; Full time

Benefits offered by this job

Flexible work hours

Annual health check-ups

Education sponsorship

Job summary

Persistent is seeking an experienced Application Security Penetration Tester to perform comprehensive security assessments of web applications, APIs, and enterprise apps. You will work with development and security teams to identify, validate, and report vulnerabilities using manual and automated testing approaches.

The role emphasizes SSDLC collaboration, remediation validation, and adherence to security standards.

Qualifications

• Bachelor's or Master's degree in Computer Science, AI/ML, Data Science, Engineering, or related field.
• 5-8 years of experience in AI/ML engineering, solution architecture, or advanced software engineering.
• Strong expertise in Generative AI and enterprise AI applications.
• Hands-on experience in Python 3.x and AI app development.
• Experience with AI/ML frameworks and vector databases.

Responsibilities

• Conduct end-to-end Web Application and API Penetration Testing engagements.
• Identify and validate security vulnerabilities based on OWASP Top 10 and API security.
• Perform automated and manual security assessments.
• Test for authentication, authorization, injections, broken access controls, misconfigurations, data exposure, session weaknesses, and API risks.
• Prepare detailed reports with vulnerability descriptions, severity, PoC, risk, and remediation guidance.
• Collaborate with development teams to explain findings and fixes.

Skills

Python 3.x

AI application development

LLMs

Retrieval-Augmented Generation

Security testing

Education

Bachelor's or Master's in CS/Engineering

Tools

LangChain

LangGraph

Semantic Kernel

CrewAI

AutoGen

LlamaIndex

Job description

About Persistent

We are an AI-led, platform-driven Digital Engineering and Enterprise Modernization partner, combining deep technical expertise and industry experience to help our clients anticipate what's next. Our offerings and proven solutions create a unique competitive advantage for our clients by giving them the power to see beyond and rise above. We work with many industry-leading organizations across the world, including 20 Fortune 50 companies and 4 of the 5 top banks in both the US and India, and numerous innovators across the healthcare ecosystem.

About Position

We are seeking an experienced Application Security Penetration Tester to perform comprehensive security assessments of web applications, APIs, and enterprise applications. The ideal candidate will possess strong expertise in identifying, validating, and reporting security vulnerabilities through both manual and automated testing approaches. In this role, you will work closely with development, DevSecOps, and security teams to strengthen application security, validate remediations, and ensure adherence to industry security standards and best practices.

• Role: Application Security Penetration Tester
• Location: Pune
• Experience: Between 5 to 8 Years
• Job Type: Full Time Employment

What You'll Do

• Conduct end-to-end Web Application and API Penetration Testing engagements.
• Identify and validate security vulnerabilities based on OWASP Top 10, OWASP API Security Top 10, Secure Coding Best Practices.
• Perform both automated and manual security assessments.
• Test applications for Authentication vulnerabilities, Authorization flaws, Injection attacks, Broken Access Control, Security Misconfigurations, Sensitive Data Exposure, Session Management Weaknesses, API Security Risks.
• Perform vulnerability validation and eliminate false positives.
• Conduct remediation verification and retesting activities.
• Prepare detailed penetration testing reports with Vulnerability descriptions, Severity ratings, Proof of Concept (PoC), Business Impact, Risk Classification, Remediation Recommendations.
• Collaborate with development teams to explain findings and recommend fixes.
• Support secure software development lifecycle (SSDLC) activities.
• Assist in risk assessment and security review activities.
• Contribute to improving application security standards and practices.

Expertise You'll Bring

• Bachelor's or Master's degree in Computer Science, Artificial Intelligence, Machine Learning, Data Science, Engineering, or a related discipline.
• 5-8 years of experience in AI/ML engineering, solution architecture, or advanced software engineering.
• Strong expertise in Generative AI, Agentic AI, and autonomous AI agents.
• Deep understanding of Large Language Models (LLMs) and enterprise AI applications.
• Hands-on experience designing and deploying AI-powered applications.
• Strong proficiency in Python 3.x and AI application development.
• Experience with frameworks such as LangChain, LangGraph, Semantic Kernel, CrewAI, AutoGen, LlamaIndex.
• Expertise in Retrieval-Augmented Generation (RAG) architectures.
• Experience integrating vector databases and knowledge retrieval systems.
• Strong understanding of AI orchestration, prompting strategies, and agent workflows.
• Experience designing scalable and secure AI architectures.
• Familiarity with machine learning pipelines and model lifecycle management.
• Strong analytical, architectural, and problem-solving skills.
• Excellent communication and stakeholder management capabilities.
• Experience working in Agile delivery environments.

Benefits

• Competitive salary and benefits package
• Culture focused on talent development with quarterly growth opportunities and company-sponsored higher education and certifications
• Opportunity to work with cutting-edge technologies
• Employee engagement initiatives such as project parties, flexible work hours, and Long Service awards
• Annual health check-ups
• Insurance coverage: group term life, personal accident, and Mediclaim hospitalization for self, spouse, two children, and parents

Values-Driven, People-Centric & Inclusive Work Environment

Persistent is dedicated to fostering diversity and inclusion in the workplace. We invite applications from all qualified individuals, including those with disabilities, and regardless of gender or gender preference. We welcome diverse candidates from all backgrounds.

• We support hybrid work and flexible hours to fit diverse lifestyles.
• Our office is accessibility-friendly, with ergonomic setups and assistive technologies to support employees with physical disabilities.
• If you are a person with disabilities and have specific requirements, please inform us during the application process or at any time during your employment.

Let's unleash your full potential at Persistent - persistent.com/careers

Persistent is an Equal Opportunity Employer and prohibits discrimination and harassment of any kind.

Vulnerability Assessment,OWASP