Penetration testing engineer

Sysmind; Hyderabad, Bengaluru; On-site; INR 1,200,000 - 2,200,000; Full time

Job summary

Sysmind is seeking an experienced Application Security Testing Engineer / Penetration Testing Engineer to perform penetration testing on web applications and APIs, with hands-on use of Burp Suite and secure coding reviews.

You will work across Java, JavaScript, Python, and related technologies, implement SAST/DAST/IAST, and help embed security into CI/CD and DevSecOps practices while aligning with OWASP Top 10 and cloud/container security.

Qualifications

• 6+ years of experience in application security testing and penetration testing.

Responsibilities

• Perform penetration testing on web applications and APIs.
• Conduct secure code reviews for applications developed in Java, JavaScript, or Python.
• Work with SAST/DAST/IAST tools and perform false-positive analysis.
• Support integration of security testing into CI/CD and DevSecOps practices.
• Contribute to vulnerability management, remediation, and security audits.

Skills

Application Security

Penetration Testing

Burp Suite

Web & API Security

OWASP Top 10

SAST

DAST

IAST

Java

JavaScript

Python

CI/CD

DevSecOps

Cloud Security

Container Security

Secure Code Review

Tools

Burp Suite

Job description

Application Security Testing Engineer / Penetration Testing Engineer

Experience: 6+ Years

Job Description:

• Perform penetration testing on web applications and APIs using Burp Suite.
• Conduct secure code reviews and analyze applications developed in Java, JavaScript, Python, or similar technologies.
• Hands-on experience with SAST, DAST, and IAST tools, including false-positive analysis.
• Strong understanding of OWASP Top 10, vulnerability assessment, and remediation.
• Integrate security testing into CI/CD pipelines and support DevSecOps practices.
• Knowledge of network security, encryption, access control, identity management, and cloud/container security.
• Experience with security assessments, vulnerability management, incident response, SDLC security, and compliance audits.
• Strong analytical, troubleshooting, and communication skills.

Required Skills: Application Security, Penetration Testing, Burp Suite, Web & API Security, OWASP Top 10, SAST, DAST, IAST, Java, JavaScript, Python, CI/CD, DevSecOps, Cloud Security, Container Security, Secure Code Review.