Specialist - CyberSecurity

LTM Limited; Karnataka; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

LTM Limited is seeking a Contract Security Tester to perform detailed security testing of web, mobile, thick client, cloud-native applications and APIs, using a mix of automated tools and manual techniques.

You will also assess AI chatbots and MCP-based applications for GenAI risks, design adversarial prompts, and contribute to remediation reporting and documentation while collaborating with cross-functional teams inside the agreed engagement scope.

Qualifications

• 4 years of hands-on experience delivering vulnerability assessment and penetration testing engagements.
• Strong understanding of OWASP Top 10 for Web/API/MCP/LLM/OSSTMM, PTES and NIST standards.
• 2 years of hands-on understanding of GenAI risks including prompt injection, data leakage, hallucination, and model misuse.

Responsibilities

• Conduct penetration testing of web, mobile, thick, cloud-native applications and APIs using automated tools and manual techniques.
• Assess AI security testing covering AI chatbots and MCP-based applications; develop risk-based remediation.
• Create and execute AI security test scenarios, including prompt injection and data leakage simulations.
• Design adversarial prompts to test model guardrails and robustness; report findings and recommendations.
• Prepare clear, evidence-backed reports and proofs of concept where applicable; contribute to templates and documentation.
• Collaborate with security, development and project teams; support remediation discussions within scope.
• Stay updated on emerging threats, vulnerabilities, and testing methodologies.

Skills

API Security testing

Penetration testing

Secure SDLC

Education

Bachelor's degree in Computer Science or Information Security

Tools

HCL AppScan

Burp Suite

Job description

Contract Scope Responsibilities

Core Penetration Testing Conduct detailed penetration testing of web applications mobile applications thick clients cloudnative applications APIs and network environments using both automated tools and manual testing techniques

AILLM Security Testing Assess AI chatbots AI agents and Model Context Protocol MCPbased applications including risks introduced by AI systems and how those risks can be tested governed and reduced

Execute handson AI security test scenarios covering prompt injection jailbreaks harmful outputs sensitive data leakage tool misuse hallucination grounding failures and policy bypass

Design and run adversarial prompts to test model and guardrail robustness

Reporting Remediation Identify classify and prioritize vulnerabilities based on risk and business impact and prepare clear reports with findings evidence and proofofconcept details where applicable

Collaboration Delivery Support Work with internal security development and project teams to understand application functionality validate risks communicate findings and support remediation discussions within the agreed engagement scope

Stay current with emerging security threats vulnerabilities technologies and testing methodologies

Contribute to agreed security testing templates reporting formats methodologies and process documentation where required for the engagement

Required Contractor Profile

• Bachelors degree in computer science information security or a related discipline
• 4 years of handson experience delivering vulnerability assessment and penetration testing engagements
• Strong understanding of OWASP Top 10 around Web API LLM Agentic Apps MCP SANS Top 25 OSSTMM PTES and NIST standards

2 years of strong understanding and handson of common GenAI risks including prompt injection sensitive data leakage insecure output handling excessive agency hallucination and model misuse

• Ability to write and execute structured AI security test cases
• Handson experience with leading application security testing tools such as HCL AppScan and Burp Suite
• Good conceptual understanding and practical handson experience with SAST DAST and other security testing approaches relevant to software development
• Strong foundation in application architecture development practices and the software development lifecycle
• Strong knowledge of secure software development principles including cryptography authentication mechanisms and security protocols
• Relevant certifications such as OSCP OSWE or CEH are a plus
• Strong English communication skills both written and verbal

Engagement Expectations

• Strong communication and presentation skills with the confidence to engage effectively with stakeholders
• Ability to work collaboratively and effectively with crossfunctional and geographically dispersed teams
• Availability to support agreed engagement timelines and occasional coordination across global time zones as required
• Selfdriven working style with the ability to deliver quality outputs independently and within agreed timelines
• Ability to clearly document testing scope assumptions limitations evidence and recommendations for internal review

Skills

Mandatory Skills : Application Security - API Security testing, Application Security DAST & Penetration Testing - review/ Implementation/ Scanning/ Secure Code Review/ OWASP/ Remediation Advisor/ Secure SDLC

About LTM

LTM is an AI-centric global technology services company and the Business Creativity partner to the world’s largest and most disruptive enterprises. We bring human insights and intelligent systems together to help clients create greater value at the intersection of technology and domain expertise. Our capabilities span integrated operations, transformation, and business AI enabling new ways of working, new productivity paradigms, and new roads to value. Together with over 87,000 employees across 40 countries and our global network of partners, LTM