Penetration Testing Engineer / Application Security Testing Engineer

VMC Soft Technologies, Inc; Dadri; On-site; INR 2,500,000 - 4,200,000; Full time

Job summary

VMC Soft Technologies, Inc is hiring a senior Application Security Testing Engineer in India. The role requires 8+ years of hands-on security testing experience, proficiency in web/API pentesting, Burp Suite, and secure code reviews across Java, JavaScript, and Python.

You will drive SAST/DAST/IAST testing, validate findings, and guide remediation within CI/CD pipelines. You will collaborate with development teams to strengthen SDLC security, address OWASP Top 10 risks, and support

Qualifications

• 8+ years of experience in application security testing.
• Proficient in web and API penetration testing tools and techniques.
• Skilled inBurp Suite and manual testing methods.
• Experience with SAST/DAST/IAST and vulnerability validation.
• Solid knowledge of OWASP Top 10 risks and mitigations.
• Ability to perform secure code reviews across Java, JavaScript, Python.
• Experience integrating security tests into CI/CD pipelines.
• Familiar with SDLC security practices and IAM, cloud and container security.

Responsibilities

• Perform web application and API penetration testing using Burp Suite.
• Conduct secure code reviews for Java, JavaScript, Python, and others.
• Run SAST, DAST, and IAST scans and confirm vulnerabilities, eliminating false positives.
• Assess applications against OWASP Top 10 and suggest remediations.
• Integrate automated security testing into CI/CD pipelines.
• Carry out vulnerability assessments, security audits, and compliance reviews.
• Support cloud and container security initiatives and SDLC security.

Skills

Application Security Testing

Web/API Pen Testing

Secure Code Review

OWASP Top 10

SAST/DAST/IAST

False Positive Analysis

CI/CD Security Integration

SDLC Security

Network Security

IAM

Cloud/Container Security

Tools

Burp Suite

Job description

We're Hiring | Application Security Testing Engineer

We are looking for an experienced Application Security Testing Engineer to join our team!

Location: Bangalore (Preferred) / Other Apple Locations across India

Experience: 8+ Years

Must-Have Skills

• Application Security Testing


• Web & API Penetration Testing


• Burp Suite


• SAST, DAST & IAST


• OWASP Top 10


• Secure Code Review (Java, JavaScript, Python)


• Vulnerability Assessment & False Positive Analysis


• CI/CD Security Integration


• SDLC Security


• Network Security


• Identity & Access Management (IAM)


• Cloud Security & Container Security

Good-to-Have Skills

• Security Incident Response


• Root Cause Analysis (RCA)


• Security Audits & Compliance


• DevSecOps Practices

Key Responsibilities

• Perform web application and API penetration testing using Burp Suite.


• Conduct secure code reviews for Java, JavaScript, Python, and other applications.


• Execute SAST, DAST, and IAST scans and validate vulnerabilities by eliminating false positives.


• Assess applications against OWASP Top 10 and recommend remediation strategies.


• Integrate automated security testing into CI/CD pipelines.


• Perform vulnerability assessments, security audits, and compliance reviews.


• Support cloud and container security initiatives.


• Collaborate with development teams to strengthen SDLC security and remediate security findings.