Penetration Tester – App & Cloud Security

JobCubby; Hinoba-an; On-site; PHP 796,000 - 1,194,000; Full time

Job summary

Target in Bengaluru seeks a Penetration Tester who will lead manual and automated security assessments across cloud infrastructure and applications. You will perform application-layer and network-layer testing, prioritize remediation, and document findings for engineering and product teams.

You should have 4+ years in security testing, knowledge of OWASP, scripting in Python/Go/Ruby, and experience with BurpSuite, SAST/DAST/IAST. Certifications like OSCP/CEH are a plus.

Qualifications

• Minimum of 4+ years of hands-on experience in penetration testing, ethical hacking, or application security engineering.
• Deep understanding of common web-based attacks (SQLi, XSS, CSRF, XXE) and mitigation at the application level.
• Proficiency in scripting or programming languages such as Python, Go, Ruby, or Bash to automate security tasks.
• Comprehensive knowledge of network protocols and security concepts (TCP/IP, DNS, HTTP/S, TLS, IPSEC).
• Strong experience with security testing tools (BurpSuite Enterprise, SAST, DAST, IAST).
• Working knowledge of OWASP security fundamentals and API identity/access management (OAuth 2.0, OIDC, JWT).
• Ability to communicate technical findings clearly to technical and non-technical audiences.
• Relevant information security certifications such as OSCP, CEH, OSWE, or CISSP.

Responsibilities

• Perform comprehensive manual and automated application-layer penetration tests.
• Conduct network-layer penetration tests across components supporting network functions and OS.
• Validate segmentation and scope-reduction controls annually and after changes.
• Triage and validate vulnerabilities from bug bounty programs.
• Document and risk-rate findings with remediation guidance for engineering teams.
• Verify remediation through re-testing and post-remediation assessments.
• Collaborate with external security firms on penetration testing and threat hunting.
• Ensure assessments meet PCI DSS, SOC, and regulatory obligations.

Skills

Penetration testing

Python

Networking

BurpSuite

OWASP

Security certifications

Education

Bachelor's degree in CS/IS

Tools

BurpSuite Enterprise

SAST

DAST

IAST

Job description

Target in Bengaluru seeks a Penetration Tester who will lead manual and automated security assessments across cloud infrastructure and applications. You will perform application-layer and network-layer testing, prioritize remediation, and document findings for engineering and product teams.

You should have 4+ years in security testing, knowledge of OWASP, scripting in Python/Go/Ruby, and experience with BurpSuite, SAST/DAST/IAST. Certifications like OSCP/CEH are a plus.