Senior Engineer - Penetration Tester

Rakuten Asia Pte Ltd; Bengaluru, Indore District; On-site; INR 3,500,000 - 6,500,000; Full time

Job summary

Rakuten Asia Pte Ltd. seeks a Senior Penetration Tester to conduct advanced offensive security assessments across web, mobile, APIs, cloud, AI/ML, and telecom environments in Bangalore or Indore, India.

You will identify complex vulnerabilities, validate exploitability, support red team activities, and guide engineering teams in remediation. The role requires 10+ years of hands-on experience in penetration testing, strong knowledge of web/mobile/API/security testing, and proficiency with Burp

Qualifications

• 10+ years of hands-on penetration testing and application security experience.
• Experience across web, mobile, API, cloud, and telecom security testing.
• Familiarity with secure coding reviews and architecture risk assessments.

Responsibilities

• Conduct advanced penetration testing of web/mobile/API/cloud environments.
• Identify complex vulnerabilities and validate exploitability.
• Support red team activities and provide remediation guidance to engineering teams.
• Create actionable reports and assist in remediation testing.

Skills

Penetration testing

Web security

Mobile security

API security

Cloud security

Education

Bachelor's degree in CS/IS

Tools

Burp Suite

Kali Linux

Metasploit

Nmap

Nessus

Job description

## Senior Engineer - Penetration TesterApply: RSIN\\_Bangalore: RSIN\\_Indore: Full time: Posted 2 Days Ago: 1038063**Job Description:****Job Title:** Senior Penetration Tester(Sr. Penetration Tester) **Department:** Security Assurance **Reports To:** Senior Manager, Security Assurance Section **Location:** Bangalore or Indore, India**About the Team/Department:**At Rakuten Mobile Security Assurance, you will help secure one of the world's most advanced cloud-native telecom networks, protecting millions of customers across digital, mobile, cloud, and AI-driven services.You will work on cutting-edge offensive security challenges spanning 4G/5G telecom platforms, cloud-native infrastructure, applications, APIs, AI/ML systems, and emerging technologies.We offer an environment where innovation is encouraged, continuous learning is supported, and security experts are empowered to make a direct business impact.You will have the opportunity to work alongside industry-leading engineers, build next-generation security capabilities, leverage AI to transform security testing, and contribute to protecting critical telecommunications infrastructure at scale.If you are passionate about offensive security, enjoy solving complex technical challenges, and want to shape the future of cybersecurity in the AI era, we would love to hear from you.**Position Summary** Perform advanced penetration testing and offensive security assessments across Rakuten Mobile's web, mobile,API, cloud, AI/ML, and telecom environments. The role focuses on identifying complex security vulnerabilities,validating exploitability, supporting red team activities, and helping engineering teams strengthen theorganization's security posture.**Key Responsibilities** • Conduct manual and automated penetration testing of web applications, mobile applications, APIs, cloudplatforms, and network infrastructure.• Perform security assessments of AI/ML applications, LLM-based systems, AI agents, RAG implementations,and MLOps pipelines.• Identify vulnerabilities such as prompt injection, insecure model integrations, data leakage, modelmanipulation, and AI supply chain risks.• Execute security testing of telecom systems, including BSS/OSS applications, eSIM platforms, subscribermanagement systems, mobile network services, and internet-facing telecom applications.• Support red team exercises, adversary emulation engagements, attack path analysis, and exploit validation.• Conduct source code reviews, secure design reviews, and architecture-level security assessments whenrequired.• Develop proof-of-concepts, create detailed technical reports, and provide actionable remediationrecommendations.• Validate remediation fixes and perform security re-testing to confirm closure.• Research emerging attack techniques, exploit methodologies, AI-assisted testing methods, and offensivesecurity tools.• Contribute to automation initiatives and continuous security validation capabilities.**Required Qualifications**• 10+ years of hands-on penetration testing and application security experience.• Strong expertise in web, mobile, API, cloud, infrastructure, and AI security testing.• Experience with Burp Suite, Kali Linux, Metasploit, BloodHound, Nmap, Nessus, and modern offensive securityframeworks.• Knowledge of programming and scripting languages such as Python, JavaScript, Bash, and PowerShell.• Familiarity with cloud platforms such as AWS, Azure, or GCP and containerized environments such asKubernetes and Docker.**Preferred Qualifications**• Experience with telecom technologies, mobile core networks, BSS/OSS systems, and cloud-native telecom applications is preferred.• Preferred certifications: OSCP, CRTP, CRTO, OSEP, OSWE, GPEN, GXPN or equivalent certifications.Nice-to-Have Expertise• AI/LLM security testing and adversarial machine learning.• Red team operations and advanced exploit development.• Cloud and Kubernetes security assessments.• 5G / telecom security testing and BSS/OSS security validation.• Bug bounty, vulnerability research, and AI-assisted penetration testing.**Core Competencies*** Advanced Offensive Security – Conducts complex manual penetration tests, exploit validation, and attack-path analysis.* Application and API Security – Assesses web, mobile, API, source-code, and application architecture risks.* Cloud and Infrastructure Security – Tests AWS/Azure/GCP, Kubernetes, containers, networks, identity systems, and configurations.* AI/ML Security Testing – Evaluates LLMs, AI agents, RAG solutions, MLOps pipelines, and AI supply-chain risks.* Telecom Security Expertise – Understands 4G/5G, BSS/OSS, eSIM, subscriber platforms, and cloud-native telecom environments.* Red Teaming and Adversary Emulation – Applies realistic attacker techniques and supports advanced offensive-security exercises.* Security Automation and Scripting – Uses Python, JavaScript, Bash, or PowerShell to automate testing and validation.* Analytical Problem-Solving – Investigates complex systems, prioritizes exploitable risks, and develops practical proofs of concept.* Risk Communication and Reporting – Clearly explains technical findings, business impact, and actionable remediation to technical and nontechnical stakeholders.* Collaboration and Technical Leadership – Works effectively with engineering teams, mentors others, and drives remediation through closure.* Continuous Learning and Innovation – Tracks emerging attack techniques, vulnerabilities, tools, and AI-assisted testing methods.* Professional Ethics and Accountability – Handles sensitive information responsibly and performs testing within authorized scope.* undefined