Specialist - CyberSecurity

LTM; Bengaluru; On-site; INR 1,500,000 - 2,600,000; Full time

Job summary

LTM is seeking a contractor-level security tester to perform comprehensive vulnerability assessments across web, mobile, APIs, and cloud-native platforms using both automated tools and manual testing techniques.

The role requires hands-on experience with OWASP Top 10, API and GenAI risk testing, and proficiency in tools like HCL AppScan and Burp Suite, with strong English communication skills essential for stakeholder engagement.

Qualifications

• Bachelor's degree in computer science, information security, or related discipline.
• 4 years of hands-on experience delivering vulnerability assessment and penetration testing engagements.
• Strong understanding of OWASP Top 10 around Web/API; MCP; SANS Top 25; OSSTMM; PTES; and NIST standards.
• 2 years of strong understanding and hands-on of GenAI risks including prompt injection, data leakage, model misuse, hallucination, and policy bypass.
• Ability to write and execute structured AI security test cases.
• Strong English communication skills, written and verbal.

Responsibilities

• Conduct detailed penetration testing of web, mobile, thick client, cloud-native apps, APIs and network environments using automated tools and manual testing techniques.
• Execute handson AI security test scenarios covering prompt injection, jailbreaks, sensitive data leakage, tool misuse, hallucination, grounding failures and policy bypass.
• Design and run adversarial prompts to test model and guardrail robustness; report and remediate vulnerabilities with clear evidence and proof-of-concept where applicable.
• Collaborate with internal security, development and project teams to validate risks and support remediation discussions within the engagement scope.
• Stay current with emerging security threats, vulnerabilities and testing methodologies; contribute to templates, reporting formats, methodologies and process docs.

Skills

Penetration testing

AI security testing

Structured test case design

Education

Bachelor's degree in CS/InfoSec or related

Tools

HCL AppScan

Burp Suite

Job description

Contract Scope Responsibilities Core Penetration Testing Conduct detailed penetration testing of web applications mobile applications thick clients cloudnative applications APIs and network environments using both automated tools and manual testing techniques AILLM Security Testing Assess AI chatbots AI agents and Model Context Protocol MCPbased applications including risks introduced by AI systems and how those risks can be tested governed and reduced

Execute handson AI security test scenarios covering prompt injection jailbreaks harmful outputs sensitive data leakage tool misuse hallucination grounding failures and policy bypass Design and run adversarial prompts to test model and guardrail robustness Reporting Remediation Identify classify and prioritize vulnerabilities based on risk and business impact and prepare clear reports with findings evidence and proofofconcept details where applicable

Collaboration Delivery Support Work with internal security development and project teams to understand application functionality validate risks communicate findings and support remediation discussions within the agreed engagement scope Stay current with emerging security threats vulnerabilities technologies and testing methodologies

Contribute to agreed security testing templates reporting formats methodologies and process documentation where required for the engagement Required Contractor Profile Bachelors degree in computer science information security or a related discipline 4 years of handson experience delivering vulnerability assessment and penetration testing engagements

Strong understanding of OWASP Top 10 around Web API LLM Agentic Apps MCP SANS Top 25 OSSTMM PTES and NIST standards 2 years of strong understanding and handson of common GenAI risks including prompt injection sensitive data leakage insecure output handling excessive agency hallucination and model misuse

Ability to write and execute structured AI security test cases

Handson experience with leading application security testing tools such as HCL AppScan and Burp Suite

Good conceptual understanding and practical handson experience with SAST DAST and other security testing approaches relevant to software development

Strong foundation in application architecture development practices and the software development lifecycle

Strong knowledge of secure software development principles including cryptography authentication mechanisms and security protocols

Relevant certifications such as OSCP OSWE or CEH are a plus

Strong English communication skills both written and verbal

Engagement Expectations

Strong communication and presentation skills with the confidence to engage effectively with stakeholders

Ability to work collaboratively and effectively with crossfunctional and geographically dispersed teams Availability to support agreed engagement timelines and occasional coordination across global time zones as required Selfdriven working style with the ability to deliver quality outputs independently and within agreed timelines Ability to clearly document testing scope assumptions limitations evidence and recommendations for internal review

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.