Senior Penetration Tester

AppSecure Security; Bengaluru Urban; Remote; INR 1,500,000 - 2,100,000; Full time

Benefits offered by this job

Competitive compensation package

Comprehensive health insurance

Company-sponsored off-sites

Cutting-edge projects

Team of researchers

Job summary

A cybersecurity firm is seeking a Senior Penetration Tester to join their global offensive security team. This fully remote role involves conducting various security tests across web, API, mobile, and network applications while mentoring junior testers. The ideal candidate will have at least 3 years of penetration testing experience and relevant industry certifications. Competitive compensation and comprehensive benefits are offered.

Qualifications

• 3+ years of hands-on penetration testing experience.
• Strong expertise in Web, API, Mobile, and Network security testing.
• Familiarity with OWASP Top 10 and modern exploitation techniques.
• Solid understanding of cloud environments is a plus.
• Certs such as OSCP/CREST/OSWE/OSCE valued.
• Bug bounty experience on major platforms is a plus.

Responsibilities

• Conduct penetration testing across web, API, mobile, and network applications.
• Perform threat modeling and exploit research.
• Simulate advanced attack scenarios.
• Contribute to red-team exercises.
• Engage with clients to explain findings.
• Mentor junior testers.

Skills

Penetration testing

Vulnerability assessments

Threat modeling

Web security testing

API security testing

Mobile security testing

Network security testing

Communication skills

Independent work

Education

OSCP, CREST, OSWE, OSCE certifications

Tools

HackerOne

Bugcrowd

Synack

Job description

Overview

Location: Fully Remote

Appsecure is a leading offensive cybersecurity and red-team services company trusted by Fortune 500s, high-growth startups, and global enterprises. Our team consists of top bug bounty hunters, seasoned red teamers, and security researchers who deliver high-impact security testing across web, mobile, API, and cloud infrastructures.

We are CREST-accredited, CSA Singapore compliant, and we pride ourselves on providing “Apple-quality” offensive security services to our customers.

Role Overview

We are looking for a Senior Penetration Tester to join our global offensive security team. The ideal candidate is highly skilled in identifying and exploiting vulnerabilities across Web, API, Mobile, and Network infrastructures. You’ll work on challenging real-world engagements, simulate advanced attacker techniques, and deliver high-quality reports that drive real business impact.

Responsibilities

• Conduct penetration testing across web, API, mobile, and network applications.
• Perform threat modeling, vulnerability assessments, and exploit research.
• Simulate advanced attack scenarios including business logic flaws, privilege escalation, and chained exploits.
• Contribute to red-team exercises and advanced adversary simulations.
• Work with clients to explain findings, remediation steps, and best practices in a clear and professional manner.
• Mentor junior testers and contribute to Appsecure’s research and methodologies.
• (Optional) Participate in bug bounty programs to strengthen hands-on offensive skills.

Requirements

• 3+ years of hands-on penetration testing experience (consulting or in-house).
• Strong expertise in Web, API, Mobile (iOS/Android), and Network security testing.
• Familiarity with OWASP Top 10, API Top 10, and modern exploitation techniques.
• Solid understanding of cloud environments (AWS, GCP, Azure) is a plus.
• Industry certifications like OSCP, CREST, OSWE, OSCE, or equivalent are highly valued.
• Bug bounty experience on platforms like HackerOne, Bugcrowd, or Synack is a plus.
• Strong communication skills to engage with technical and non-technical stakeholders.
• Ability to work independently in a remote, global team environment.

What We Offer

• Competitive, performance-driven compensation package.
• Comprehensive health insurance and wellness benefits.
• Company-sponsored off-sites and team retreats.
• Exposure to cutting-edge offensive security projects across industries.
• Opportunity to work alongside some of the top researchers and bug bounty hunters.

Additional Information

• Seniority level: Mid-Senior level
• Employment type: Full-time
• Job function: Information Technology
• Industries: Computer and Network Security