Penetration Tester

Role: Penetration testing
Experience: 5+ Years
Location: Hyderabad
Job Description
Key Responsibilities:
Lead and conduct penetration testing engagements across web applications, mobile platforms, APIs, cloud environments, and enterprise systems.
Conduct API security testing across REST, GraphQL, and gRPC interfaces; validate automated scan results and triage false positives.
Assess and classify vulnerabilities per organizational risk standards; document findings with clear, reproducible proof-of-concept demonstrations.
Collaborate with development teams to communicate findings, recommend remediations, and verify fixes.
Support the development and scaling of GenAI-powered penetration testing tools and agentic security frameworks.
Perform security assessments of AI/ML systems including LLM-based applications, and agentic workflows, covering prompt injection, data leakage, and related attack vectors.
Requirements:
Bachelor’s degree in information security, computer science, or a related field.
5+ years of hands-on experience in application security and penetration testing.
Familiarity with AI/LLM security risks including the OWASP Top 10 for LLM Applications, prompt injection, training data poisoning, and insecure output handling.
Strong practical knowledge of API security testing methodologies and tools (Burp Suite, OWASP ZAP, Postman, or equivalent).
Working knowledge of OWASP Top 10, SANS/CWE, and secure SDLC practices.
Strong written and verbal communication skills with the ability to present findings to both technical and executive audiences.
Ability to work independently and collaboratively within distributed teams.
Preferred Qualifications:
Industry certifications such as OSCP, GWAPT, or GPEN.
Experience building or extending security tooling using LLMs or AI agents.
Cloud security experience (AWS, Azure, or GCP) including container security.
In addition, the below qualities are expected:
Self-motivated and ability to work independently
Excellent communication and presentation skill
Ability to be a good team player as part of remote teams

Work arrangement
Hybrid