Role Summary

We are seeking a highly skilled Senior Application Security Pentester with extensive experience in application security and penetration testing. The ideal candidate will have strong expertise in identifying and validating security vulnerabilities across web, mobile, network, and thick-client applications. This role requires hands-on penetration testing experience, strong communication skills, and the ability to provide actionable security recommendations to stakeholders.

Key Responsibilities

Application Security Testing

• Perform comprehensive application security assessments and penetration testing.
• Conduct security testing across web applications, web services, mobile applications, thick-client applications, and network infrastructure.
• Assist in defining the technical scope for security testing engagements.
• Review and validate security test cases periodically.

Vulnerability Assessment & Analysis

• Analyze and curate vulnerability data from multiple security platforms and tools.
• Validate vulnerabilities through manual penetration testing to identify true exploitability.
• Perform code-level vulnerability assessments to eliminate false positives.
• Evaluate and prioritize vulnerabilities using CVSS scoring.

Security Consulting

• Provide clear, actionable security findings and recommendations to customers.
• Support clients in understanding vulnerabilities and remediation strategies.
• Offer technical guidance on security issues, disclosures, and risk mitigation.
• Assist member firms with vulnerability remediation activities.

Security Tools & Automation

• Utilize security testing tools such as Burp Suite for application assessments.
• Develop or support automation using scripting languages such as Python.
• Assist in developing security tooling, deployment strategies, and scanning configurations.
• Support code assessments and network infrastructure testing as required.

Risk Management & Continuous Improvement

• Escalate critical security risks and urgent issues to Regional Operations Managers.
• Drive continuous improvement initiatives for vulnerability management services.
• Contribute to enterprise risk reduction through proactive security testing.

Required Qualifications

Experience

• Minimum 8+ years of hands-on experience in Penetration Testing.
• Strong background in Application Security assessments.
• Experience performing enterprise-level security testing engagements.

Technical Skills

• Expertise in Application Security.
• Hands-on experience with Burp Suite.
• Strong understanding of CVSS Scoring.
• Knowledge of Large Language Models (LLMs) and associated security considerations.
• Experience with Python or other scripting/automation languages.
• Understanding of SAST (Static Application Security Testing) and SCA (Software Composition Analysis) tools.
• Familiarity with secure coding practices and vulnerability validation.

Penetration Testing Expertise

Experience performing:

• Web Application Penetration Testing
• Web Services/API Penetration Testing
• Network Penetration Testing
• Mobile Application Penetration Testing
• Thick Client Penetration Testing
• Manual Vulnerability Validation
• Code Assessment

Soft Skills

• Excellent written and verbal communication skills.
• Strong analytical and problem-solving abilities.
• Ability to provide consultative security guidance to customers.
• Experience working with cross-functional technical teams.

Preferred Certifications

• CISSP
• OSCP
• CPT
• CEPT
• CMWAPT

Essential Skills

• Application Security
• Penetration Testing
• Burp Suite
• CVSS Scoring
• Python Scripting
• Web & API Security Testing
• Mobile Security Testing
• Network Penetration Testing
• Thick Client Testing
• Vulnerability Assessment
• LLM Security
• SAST & SCA

Preferred Skills

• Security Automation
• Secure Code Review
• Vulnerability Management
• Risk Assessment
• BFSI / Capital Markets domain experience

• Inclusive and diverse work environment
• Opportunities for professional growth and development
• Comprehensive health and wellness benefits