3 days ago
Bengaluru, India or Hyderābād, IndiaSenior
Responsibilities
- Plan, scope, and independently execute end-to-end penetration tests across web, API, OT, mobile, and industrial software targets.
- Identify high-impact vulnerabilities using a risk-based approach and articulate their technical and business risk.
- Produce high-quality reports with reproducible evidence and proof-of-concepts.
- Work directly with product teams during testing and retesting phases and provide actionable remediation guidance.
- Coordinate security assessments with external service providers.
- Contribute to penetration-testing methodologies, playbooks, and tooling.
Requirements
- At least 5 years of experience in penetration testing.
- Experience independently executing penetration tests.
- Experience testing web applications, web APIs, and industrial software targets.
- Experience testing REST, gRPC, GraphQL, and WebSocket API protocols.
- Ability to produce reproducible evidence and proof-of-concepts and provide industry-aligned remediation guidance.
- Current knowledge of state-of-the-art penetration-testing techniques.
- Preferred certifications include CEH, OSCP, GWAPT, or HTB.
- Preferred experience includes application-security community contributions such as blogs, presentations, or attributed CVEs.
- Experience with Burp Suite Pro, SQLMap, and SysInternals is preferred.
Benefits
- Regular, full-time employment.
- Preferred Bangalore location with approximately 40% office and 60% remote work; Hyderabad, Mumbai, or fully remote alternatives are available.
- India benefits include gratuity, medical and accidental insurance, leave entitlement, emergency leave days, childcare support, maternity, paternity and adoption leave, education assistance, home-office setup support for hybrid roles, and well-being support.
- Successful applicants must pass drug screening and a comprehensive background check before starting employment.
Tech Stack
GraphQLgRPC
Categories
About AVEVA
AVEVA builds industrial engineering, operations, and data-management software used by energy, process, infrastructure, and manufacturing companies. Its portfolio spans 3D design and simulation, HMI/SCADA and MES, asset performance, and the PI System for real‑time operational data, sold via enterprise licenses and cloud subscriptions. The company is headquartered in Cambridge, UK, and is a subsidiary of Schneider Electric following its 2023 acquisition and LSE delisting.