Penetration Tester

ADP; Hyderabad; On-site; INR 1,500,000 - 2,500,000; Full time

Job summary

ADP is seeking a senior security engineer in Hyderabad to lead penetration testing across web, mobile, API, cloud, and enterprise systems. The role requires communicating findings and remediations to technical and executive audiences, and validating fixes with development teams.

You will assess vulnerabilities per risk standards, document proof of concepts, and contribute to GenAI security tooling and AI/LLM security initiatives.

Qualifications

• Bachelor’s degree in information security or related field.
• 5+ years of hands-on application security and pen-testing experience.
• Familiarity with AI/LLM security risks and OWASP Top 10 for LLM apps.
• Proficient API security testing methodologies using Burp Suite, OWASP ZAP, or Postman.

Responsibilities

• Lead penetration testing across web, mobile, API, cloud, and enterprise systems.
• Assess vulnerabilities per risk standards; document with reproducible proofs.
• Communicate findings and remediation with dev teams and stakeholders.
• Support GenAI security tooling and AI/LLM security assessments.

Skills

Application security

Penetration testing

API security testing

AI/LLM security

Security tooling

Communication

Education

Bachelor’s degree in information security, computer science, or related field

Tools

Burp Suite

OWASP ZAP

Postman

LLM tooling

Job description

• Lead and conduct penetration testing engagements across web applications, mobile platforms, APIs, cloud environments, and enterprise systems.
• Conduct API security testing across REST, GraphQL, and gRPC interfaces; validate automated scan results and triage false positives.
• Assess and classify vulnerabilities per organizational risk standards; document findings with clear, reproducible proof-of-concept demonstrations.
• Collaborate with development teams to communicate findings, recommend remediations, and verify fixes.
• Support the development and scaling of GenAI-powered penetration testing tools and agentic security frameworks.
• Perform security assessments of AI/ML systems including LLM-based applications, and agentic workflows, covering prompt injection, data leakage, and related attack vectors.

Requirements:

• Bachelor’s degree in information security, computer science, or a related field.
• 5+ years of hands‑on experience in application security and penetration testing.
• Familiarity with AI/LLM security risks including the OWASP Top 10 for LLM Applications, prompt injection, training data poisoning, and insecure output handling.
• Strong practical knowledge of API security testing methodologies and tools (Burp Suite, OWASP ZAP, Postman, or equivalent).
• Working knowledge of OWASP Top 10, SANS/CWE, and secure SDLC practices.
• Strong written and verbal communication skills with the ability to present findings to both technical and executive audiences.
• Ability to work independently and collaboratively within distributed teams.

Preferred Qualifications:

• Industry certifications such as OSCP, GWAPT, or GPEN.
• Experience building or extending security tooling using LLMs or AI agents.
• Cloud security experience (AWS, Azure, or GCP) including container security.

In addition, the below qualities are expected:

• Self‑motivated and ability to work independently
• Excellent communication and presentation skill
• Ability to be a good team player as part of remote teams