Penetration Test Engineer

VMC Soft Technologies, Inc; Hyderabad; On-site; INR 2,000,000 - 3,200,000; Full time

Job summary

VMC Soft Technologies, Inc. in India is seeking an experienced Penetration Testing Engineer / Application Security Testing Engineer. The role focuses on hands-on security testing across web apps and APIs, code review for security flaws, and integrating security checks into CI/CD pipelines.

Strong knowledge of OWASP Top 10 and cloud/container security is required. Bangalore-based and other locations may apply.

Qualifications

• Hands-on penetration testing on web apps and APIs.
• Read and perform secure code reviews (Java, JavaScript, Python, etc.).
• Experience with SAST/DAST tools and false-positive analysis.
• Strong knowledge of OWASP TOP 10 and remediation techniques.
• Integrate security checks into CI/CD pipelines.

Responsibilities

• Conduct penetration testing across diverse web applications and APIs using Burp Suite.
• Perform security code reviews for secure development.
• Use SAST/DAST/IAST tools and analyze reports for false positives.
• Apply OWASP Top 10 knowledge to identify and remediate risks.
• Automate security checks within CI/CD pipelines and security audits.

Skills

Penetration testing

Application security

Code review

SAST/DAST

OWASP Top 10

CI/CD security

Network security

Vulnerability assessment

Tools

Burp Suite

SAST tools

DAST tools

IAST

CI/CD tooling

Job description

Skill

Penetration testing engineer/ Application security testing engineer

Skill

Penetration testing engineer/ Application security testing engineer

Exp

min 8+ Years and above only and not less

Jd

• Application security testing engineer, new requirement
• Hands-on experience conducting penetration testing across diverse Web-applications & APIs using Burp suite
• Strong programming and scripting skills with ability to read and perform code review from security perspective (Java, JavaScript, Python, etc.)
• Experience with SAST and DAST automated vulnerability assessment tools and False-positive analysis of the report.
• Strong knowledge of OWASP TOP 10, related causes and remediation techniques.
• Programming/scripting skills, and ability to read and audit various programming languages, (Java, JavaScript, Python etc)
• Practical experience of integrating and automating security checks into CI/CD pipeline and Conduct penetration testing against a wide variety of technologies
• Strong knowledge of network security, encryption protocols, access control, and identity management
• Ability to conduct security assessments, vulnerability scans, and penetration tests
• Hands-on experience in security technologies and tools, including SAST, IAST and DAST
• Experience with cloud security principles and technologies, including container security
• Familiarity with security incident response and root cause analysis
• Knowledge of software development lifecycle (SDLC) security practices
• Experience with security audits, compliance assessments, and remediation efforts
• Primary location:
• Bangalore and across other apple locations in india