Pentration Tester

SWITS DIGITAL Private Limited; Chennai; On-site; INR 900,000 - 1,300,000; Full time

Job summary

SWITS DIGITAL Private Limited is seeking a skilled Penetration Tester in Chennai with 3–4 years of hands-on VAPT experience. The role focuses on web app and API security testing, including REST/GraphQL testing, internal and external networks, and cloud assessments (AWS).

You will identify, validate, exploit, and report vulnerabilities while applying AI-assisted techniques and industry best practices. Candidates should understand OWASP Top 10 and risk-based approaches.

Qualifications

• 3–4 years of hands-on VAPT experience.
• Strong web application and API penetration testing.
• Experience with REST/GraphQL API security testing.
• Cloud security assessment experience, AWS preferred.
• Knowledge of OWASP Top 10 and risk-based testing.
• Ability to analyze findings with AI-assisted tools.
• Report writing with technical evidence.

Responsibilities

• Perform web applications and API penetration testing.
• Conduct internal and external network penetration testing.
• Perform cloud penetration testing and security assessments.
• Conduct authenticated and unauthenticated testing.
• Identify and validate vulnerabilities and misconfigurations.
• Prepare detailed reports with evidence and remediation recommendations.
• Coordinate with development and security teams.
• Stay updated on emerging threats and testing methodologies.

Skills

Vulnerability Assessment and Penetr a

Web app penetration testing

REST/GraphQL API testing

Internal/External network testing

Cloud security assessment (AWS)

Vulnerability identification & reports

OWASP Top 10

Networking fundamentals

Manual security testing

Automation & AI-assisted testing

Attack-path analysis

Mobile app security testing (added)

Endpoint/server security assessment (a

CVE/CWE/CVSS familiarity

Remediation & retesting

Tools

Burp Suite

OWASP ZAP

Nmap

Nessus

OpenVAS

Nuclei

Metasploit

SQLMap

Wireshark

Invicti

Wiz

Mend.io

Job description

Title-Pentration Testing

Experience - 3-4 years

Location- Chennai

Job Description

Strong hands-on experience in Vulnerability Assessment and Penetration Testing (VAPT).

Experience in web application penetration testing and manual security testing.

Experience in REST/GraphQL API penetration testing.

Experience in internal and external network penetration testing.

Experience in cloud security assessment and penetration testing, preferably AWS.

Experience In Identifying, Validating, Exploiting, And Reporting Security Vulnerabilities.

Strong understanding of OWASP Top 10, API security, authentication, authorization, and business logic vulnerabilities.

Good understanding of networking, TCP/IP, DNS, HTTP/HTTPS, VPNs, firewalls, and network security concepts.

Experience with vulnerability assessment and manual validation of security findings.

Experience with vulnerability chaining and attack-path analysis.

Experience with security testing of mobile applications is an added advantage.

Experience with endpoint and server security assessment is an added advantage.

Familiarity with CVE, CWE, CVSS, OWASP, and common vulnerability classifications.

Experience using automation and AI-assisted techniques to improve penetration testing coverage and efficiency.

Ability to analyze and manually validate findings generated through automated and AI-assisted security assessments.

Good understanding of security risk assessment, vulnerability remediation, and retesting.

Tools

Burp Suite, OWASP ZAP, Nmap, Nessus, OpenVAS, Nuclei, Metasploit, SQLMap, Wireshark, Invicti, Wiz, Mend.io

Responsibilities

• Perform penetration testing of web applications.
• Perform manual penetration testing of REST and GraphQL APIs.
• Conduct internal and external network penetration testing.
• Perform cloud penetration testing and security assessments.
• Conduct authenticated and unauthenticated penetration testing.
• Perform reconnaissance, enumeration, vulnerability discovery, validation, and exploitation.
• Identify authentication, authorization, access control, and business logic vulnerabilities.
• Identify and validate application security vulnerabilities and security misconfigurations.
• Perform API endpoint, parameter, token, authentication, and authorization testing.
• Assess network services, exposed systems, segmentation, and privilege escalation opportunities.
• Assess cloud IAM, permissions, exposed resources, configurations, and potential attack paths.
• Perform vulnerability chaining and attack-path analysis to demonstrate real-world security impact.
• Perform manual testing to identify vulnerabilities that may not be detected through automated assessments.
• Validate and verify vulnerabilities identified through automated security assessments.
• Use AI-assisted penetration testing techniques for reconnaissance, test-case generation, vulnerability analysis, and attack-path identification.
• Analyze and manually validate AI-generated findings before reporting.
• Assess vulnerability severity, exploitability, business impact, and overall risk.
• Prepare detailed penetration testing and VAPT reports with technical evidence, impact, and remediation recommendations.
• Communicate Identified Vulnerabilities And Remediation Requirements With Development, infrastructure, cloud, and security teams.
• Perform remediation verification and penetration testing retests.
• Support security risk assessments and vulnerability remediation activities.
• Research emerging vulnerabilities, attack techniques, exploitation methodologies, and AI-assisted penetration testing approaches.
• Stay updated on emerging security threats, vulnerabilities, penetration testing methodologies, and industry security standards.
• Maintain proper documentation of penetration testing activities, findings, evidence, and remediation status.
• Ensure all penetration testing activities are performed within approved scope and organizational security policies.
• Service ticket review and approvals to ensure BAU