Penetration Testing Engineer / Application Security Testing Engineer

VMC Soft Technologies, Inc; Bengaluru; On-site; INR 2,500,000 - 4,200,000; Full time

Job summary

VMC Soft Technologies, Inc in Bengaluru is seeking an experienced Penetration Testing Engineer / Application Security Testing Engineer with 8+ years to strengthen the security of enterprise applications. The role focuses on hands-on testing of web apps and APIs, secure code reviews, and integrating security into CI/CD pipelines.

You will work across Java, JavaScript, Python tech stacks, perform SAST/DAST/IAST, address OWASP Top 10, and help secure cloud, container, and network layers, while

Qualifications

• 8+ years of experience in application security testing and related fields.
• Hands-on penetration testing of web applications and APIs.
• Secure code reviews for multi-language applications (Java/JavaScript/Python).
• Experience with SAST/DAST/IAST tools and false-positive analysis.
• Knowledge of OWASP Top 10 and secure SDLC practices.
• Ability to integrate security testing into CI/CD pipelines.

Responsibilities

• Perform hands-on penetration testing of Web Applications and APIs using Burp Suite.
• Conduct secure code reviews from a security perspective for applications developed in Java, JavaScript, Python, and other languages.
• Perform vulnerability assessments using SAST, DAST, and IAST tools, including false-positive analysis.
• Identify and remediate vulnerabilities based on OWASP Top 10 best practices.
• Integrate and automate security testing within CI/CD pipelines.
• Conduct security assessments across a wide range of technologies and environments.
• Ensure adherence to Secure SDLC practices.
• Support security audits, compliance assessments, incident response, and root cause analysis.

Skills

AppSec

Penetration Testing

OWASP Top 10

CI/CD Security

Secure SDLC

Network Security

Java

JavaScript

Python

Tools

Burp Suite

Job description

Penetration Testing Engineer / Application Security Testing Engineer

We're looking for experienced Application Security professionals with 8+ years of experience to join our team and help strengthen the security of enterprise applications.

Location: Bangalore (Preferred) & other Apple locations across India

Key Responsibilities

• Perform hands‑on penetration testing of Web Applications and APIs using Burp Suite.
• Conduct secure code reviews from a security perspective for applications developed in Java, JavaScript, Python, and other languages.
• Perform vulnerability assessments using SAST, DAST, and IAST tools, including false‑positive analysis.
• Identify and remediate vulnerabilities based on OWASP Top 10 best practices.
• Integrate and automate security testing within CI/CD pipelines.
• Conduct security assessments across a wide range of technologies and environments.
• Ensure adherence to Secure SDLC practices.
• Support security audits, compliance assessments, incident response, and root cause analysis.
• Implement and assess cloud security, container security, network security, encryption, identity, and access management controls.

Required Skills

• Application Security Testing (AppSec)
• Penetration Testing (Web & API)
• Burp Suite
• SAST / DAST / IAST
• OWASP Top 10
• Java / JavaScript / Python
• CI/CD Security & DevSecOps
• Cloud & Container Security
• Secure SDLC
• Network Security

Experience: 8+ years (mandatory)