Software Engineer

Cloudxtreme; Bengaluru, Hyderabad; On-site; INR 900,000 - 1,500,000; Full time

Job summary

Cloudxtreme is seeking a skilled Cyber Security professional with hands-on experience in manual penetration testing of web apps, APIs, and mobile apps (Android & iOS).

You will identify real-world vulnerabilities, document findings with risk context, and collaborate with development teams to deliver actionable remediation guidance.

The role requires strong knowledge of OWASP Top 10, networking basics, and a commitment to staying ahead of security threats through practical testing.

Qualifications

• :Experience in manual penetration testing across web, mobile, and API apps.
• :Ability to identify and exploit real-world vulnerabilities beyond automated tools.
• :Strong understanding of OWASP Top 10 and application security.
• :Excellent reporting and remediation guidance skills.

Responsibilities

• Perform manual pen testing of web apps, APIs, and mobile apps.
• Identify, document, and report vulnerabilities with risk context.
• Collaborate with dev teams to provide remediation guidance.
• Stay updated on threats and testing methodologies.

Skills

Web app pentesting

Mobile app security

API testing

OWASP Top 10

Manual testing

Networking basics

Tools

MobSF

Burp Suite

Job description

Role & responsibilities

We are seeking a skilled Cyber Security professional with proven expertise in manual penetration testing across web applications, APIs, and mobile applications (Android & iOS). The candidate must demonstrate hands-on testing capabilities beyond automated tool usage, with a strong focus on identifying and exploiting real-world vulnerabilities.

Key Responsibilities

• Conduct manual penetration testing of web applications, APIs, and mobile applications.
• Identify, exploit, and document vulnerabilities including authentication flaws, authorization bypasses, injection attacks, insecure storage, and business logic issues.
• Collaborate with development teams to provide actionable remediation guidance.
• Prepare detailed assessment reports highlighting findings, risks, and recommendations.
• Stay updated with the latest security threats, exploits, and testing methodologies.

Required Skills

• Strong expertise in Web Application Penetration Testing.
• Hands-on experience in Mobile Application Security (Android & iOS).
• Proficiency in API Testing for REST/GraphQL endpoints.
• Solid understanding of Application Security and OWASP Top 10.
• Basic knowledge of Networking fundamentals to support penetration testing.
• Ability to perform manual testing without relying solely on automated tools (e.g., MobSF, Burp Suite defaults).

Preferred Qualifications

• Years of relevant experience in manual penetration testing (to be verified during screening).
• Track record of completed manual assessments across web, mobile, and API applications.
• Certifications (OSCP, CEH, etc.) are not mandatory, but practical expertise is essential.

What Were Looking For

• Analytical mindset with strong problem-solving skills.
• Clear communication skills for reporting and stakeholder discussions.
• Passion for cybersecurity and continuous learning.