Penetration Test Engineer

VMC Soft Technologies, Inc; Bengaluru; On-site; INR 1,500,000 - 2,600,000; Full time

Job summary

VMC Soft Technologies, Inc is seeking a seasoned Penetration Testing Engineer to perform security testing across web applications and APIs, with hands-on Burp Suite experience and strong coding skills in Java, JavaScript, and Python.

You will assess security controls, conduct vulnerability scans, and help embed security checks into CI/CD pipelines, while applying OWASP Top 10 knowledge and a deep understanding of SDLC security practices.

Qualifications

• Hands-on penetration testing across web apps and APIs using Burp Suite.
• Strong coding skills in Java, JavaScript, Python for security reviews.
• Experience with SAST/DAST/IAST tools and false-positive analysis.
• Knowledge of OWASP Top 10 and remediation techniques.
• Ability to integrate security checks into CI/CD pipelines.
• Understanding of network security, encryption, access control and identity management.
• Experience with security audits, compliance assessments and remediation.

Responsibilities

• Conduct penetration testing across diverse web applications and APIs.
• Read and audit code from a security perspective.
• Perform vulnerability assessments and manage false positives.
• Apply OWASP Top 10 knowledge to remediation steps.
• Automate security checks within CI/CD pipelines.
• Conduct security assessments and vulnerability scans.
• Support security incident response and root cause analysis.

Skills

Penetration testing

Application security

Code review

CI/CD security integration

Network security

Security incident response

SDLC security practices

Tools

Burp Suite

SAST

DAST

IAST

Job description

Skill

Penetration testing engineer/ Application security testing engineer

Exp

min 8+ Years and above only and not less

Jd

• Application security testing engineer, new requirement


• Hands-on experience conducting penetration testing across diverse Web-applications & APIs using Burp suite


• Strong programming and scripting skills with ability to read and perform code review from security perspective (Java, JavaScript, Python, etc.)


• Experience with SAST and DAST automated vulnerability assessment tools and False-positive analysis of the report.


• Strong knowledge of OWASP TOP 10, related causes and remediation techniques.


• Programming/scripting skills, and ability to read and audit various programming languages, (Java, JavaScript, Python etc)


• Practical experience of integrating and automating security checks into CI/CD pipeline and Conduct penetration testing against a wide variety of technologies


• Strong knowledge of network security, encryption protocols, access control, and identity management


• Ability to conduct security assessments, vulnerability scans, and penetration tests


• Hands-on experience in security technologies and tools, including SAST, IAST and DAST


• Experience with cloud security principles and technologies, including container security


• Familiarity with security incident response and root cause analysis


• Knowledge of software development lifecycle (SDLC) security practices


• Experience with security audits, compliance assessments, and remediation efforts

Primary location:

Bangalore and across other apple locations in india