security testing engineer

VMC Soft Technologies, Inc; Bengaluru; On-site; INR 3,500,000 - 6,000,000; Full time

Job summary

VMC Soft Technologies, Inc. is seeking a senior Penetration Testing Engineer to assess security across web applications and APIs. You will conduct in-depth testing, review code for security flaws, and utilize SAST/DAST/IAST tools to identify and remediate issues.

You will apply OWASP Top 10 knowledge, integrate security checks into CI/CD pipelines, and participate in incident response and SDLC security practices. Bengaluru location with potential travel to other India offices.

Qualifications

• Minimum 8+ years in the field.
• Experience conducting penetration testing across web applications and APIs.
• Strong knowledge of OWASP Top 10 and remediation techniques.
• Experience integrating security checks into CI/CD pipelines.

Responsibilities

• Conduct penetration testing across diverse web applications and APIs using Burp Suite.
• Perform code review from a security perspective using Java, JavaScript, Python and other languages.
• Use SAST and DAST automated vulnerability assessment tools and perform false‑positive analysis of reports.
• Apply strong knowledge of OWASP Top 10, remediation techniques, and related causes.
• Integrate and automate security checks into CI/CD pipelines.
• Execute penetration testing against a wide variety of technologies.
• Leverage network security, encryption protocols, access control, and identity management knowledge.
• Conduct security assessments, vulnerability scans, and penetration tests.
• Utilize security technologies and tools, including SAST, IAST, and DAST.
• Apply cloud security principles including container security.
• Participate in security incident response and root‑cause analysis.
• Implement SDLC security practices.
• Perform security audits, compliance assessments, and remediation efforts.

Skills

Java

JavaScript

Python

Code review

Penetration testing

Security testing

CI/CD integration

Networking security

Identity management

Encryption protocols

Tools

Burp Suite

SAST

IAST

DAST

CI/CD tooling

Job description

Job Title

Penetration Testing Engineer / Application Security Testing Engineer

Location

Bangalore and other Apple locations in India

Experience

Minimum 8+ years in the field.

Job Description

• Conduct penetration testing across diverse web applications and APIs using Burp Suite.
• Perform code review from a security perspective, utilizing programming and scripting skills in Java, JavaScript, Python, and other languages.
• Use SAST and DAST automated vulnerability assessment tools and perform false‑positive analysis of reports.
• Apply strong knowledge of OWASP Top 10, remediation techniques, and related causes.
• Integrate and automate security checks into CI/CD pipelines.
• Execute penetration testing against a wide variety of technologies.
• Leverage network security, encryption protocols, access control, and identity management knowledge.
• Conduct security assessments, vulnerability scans, and penetration tests.
• Utilize security technologies and tools, including SAST, IAST, and DAST.
• Apply cloud security principles and technologies, including container security.
• Participate in security incident response and root‑cause analysis.
• Implement SDLC security practices.
• Perform security audits, compliance assessments, and remediation efforts.