Penetration Tester

SourcingXPress; Bengaluru; On-site; INR 2,000,000 - 3,000,000; Full time

Job summary

A tech services company is seeking an experienced Penetration Tester in Bengaluru to perform comprehensive security assessments across various applications. The role demands 3 to 7 years of experience in application security assessments, with strong skills in manual penetration testing and a thorough understanding of OWASP methodologies. Excellent communication skills to convey vulnerabilities to stakeholders are essential. This position offers a salary range of ₹20-30 Lacs PA.

Qualifications

• 3 to 7 years of experience conducting Application Security assessments.
• Experienced in conducting Manual and Automated DAST for Web, API & Thick client covering OWASP Top 10.
• Knowledge of Infra VAPT or at least VA and configuration review is required.

Responsibilities

• Conduct manual and automated application security testing.
• Perform manual penetration testing using OWASP methodologies.
• Prepare detailed security assessment reports with risk ratings.

Skills

Application Security Assessments

Manual Penetration Testing

OWASP Methodologies

Security Configuration Review

Mobile VAPT

Good Communication Skills

Tools

Docker

Cloud Audit

Job description

Company: Happiest Minds

Website: Visit Website

Business Type: Enterprise

Company Type: Service

Business Model: B2B

Funding Stage: IPO/Public

Industry: Information Technology and Services

Salary Range: ₹ 20-30 Lacs PA

Job Description

We are looking for an experienced Penetration Tester to perform comprehensive security assessments across web, API, mobile, and thick-client applications. The role requires strong hands‑on expertise in manual penetration testing, vulnerability assessment, and secure configuration reviews, along with the ability to clearly communicate risks to technical and business stakeholders.

What You'll Do

• Conduct manual and automated application security testing for Web, API, and Thick Client applications.
• Perform manual penetration testing using OWASP methodologies and checklists.
• Execute DAST assessments covering OWASP Top 10 vulnerabilities.
• Perform manual source code reviews to identify security flaws.
• Conduct Mobile Application VAPT (both Static and Dynamic analysis).
• Carry out security configuration reviews and vulnerability assessments.
• Prepare detailed security assessment reports with risk ratings and remediation guidance.
• Effectively explain identified vulnerabilities and business impact to non‑technical stakeholders.

What We're Looking For

• 3 to 7 years of experience conducting Application Security assessments
• Experienced in conducting Manual and Automated DAST for Web, API & Thick client covering OWASP Top 10
• Experienced in conducting Manual code review
• Experienced in Mobile VAPT (Both static and Dynamic)
• Knowledge of Infra VAPT or at least VA and configuration review
• Knowledge in Container / Docker security / Cloud Audit is a plus
• Certifications such as CEH, CRTP, OSCP are preferred
• Good communication skills, ability to explain vulnerabilities to business users in simple terms.

Core Skills

• Manual Penetration Testing using OWASP methodologies and checklists
• Application Penetration Testing (Web, API, Thick Client)
• OWASP Top 10
• Security Configuration Review