Penetration Tester/Application Security Expert

6 years

10 - 12 Lacs

Posted:2 days ago| Platform: Linkedin logo

Apply

Work Mode

On-site

Job Type

Full Time

Job Description

Application Security Expert – Red Team / Penetration Tester

Position Overview

We seek an experienced Application Security Expert to join our Red Team. The role involves identifying and exploiting vulnerabilities across applications and IT environments, simulating real-world cyberattacks, performing advanced penetration testing, and providing security insights throughout the SDLC.

Key Responsibilities

  • Conduct full-scope red team engagements across web, mobile, cloud, network, and physical domains.
  • Perform adversary emulation using MITRE ATT&CK and threat intelligence.
  • Use and develop custom exploits and offensive tools (Cobalt Strike, Metasploit, Burp Suite, Kali).
  • Execute covert social engineering and physical security tests.
  • Exploit vulnerabilities and test detection/response capabilities.
  • Test web/mobile apps, APIs, cloud (AWS/Azure/GCP), networks, containers, Kubernetes, and CI/CD.
  • Identify complex vulnerabilities (logic flaws, auth issues, deserialization, privilege escalation).
  • Provide detailed remediation-focused reports.
  • Perform security assessments on AI/ML systems, including Large Language Models (LLMs), prompt injection testing, model abuse, data leakage risks, and adversarial attacks
  • Work with dev, DevOps, and security teams to embed security testing early.
  • Influence secure design and promote security awareness.
  • Retest fixes and automate testing workflows.
  • Prepare technical reports and executive summaries; present findings to teams and leadership.

Required Skills & Qualifications

  • 6 - 8 years in application security, penetration testing, or red teaming.
  • Expertise with offensive tools (Metasploit, Burp Suite, Cobalt Strike, Kali).
  • Strong exploitation skills across web, network (Kerberos, SMB, LDAP), and cloud (IAM, misconfig).
  • Proficient in Python, Java, C/C++, PowerShell, or Bash.
  • Strong understanding of web architecture, AI, LLM, API security, networking, cloud security, containers, and CI/CD.

Certifications

  • OSCP – Required
  • OSCE / OSWE – Highly preferred
  • CEH, GWAPT, OSEP, CRTO – Preferred
Skills: metasploit,smb,ldap,penetration testing,kerberos,security,burp suite,red team

Mock Interview

Practice Video Interview with JobPe AI

Start DevOps Interview
cta

Start Your Job Search Today

Browse through a variety of job opportunities tailored to your skills and preferences. Filter by location, experience, salary, and more to find your perfect fit.

Job Application AI Bot

Job Application AI Bot

Apply to 20+ Portals in one click

Download Now

Download the Mobile App

Instantly access job listings, apply easily, and track applications.

coding practice

Enhance Your Python Skills

Practice Python coding challenges to boost your skills

Start Practicing Python Now

RecommendedJobs for You