Job Description
Role Description
VAPT / Penetration Tester (Web, Mobile & AI Applications)
Location - Bangalore (Hybrid)
Experience: 2-5 Years
Job Summary
We are seeking a skilled VAPT (Vulnerability Assessment and Penetration Testing) Engineer with hands-on experience in Web Application and Mobile Application Security Testing. The ideal candidate should possess strong expertise in identifying, assessing, and mitigating security vulnerabilities across applications and infrastructure. Exposure to AI/LLM-based application security testing is highly preferred.
Key Responsibilities
Perform Vulnerability Assessment and Penetration Testing (VAPT) on Web and Mobile applications.
Conduct security assessments based on industry standards such as OWASP Top 10, OWASP Mobile Top 10, SANS, and NIST frameworks.
Identify, validate, and document security vulnerabilities with detailed remediation recommendations.
Execute manual and automated penetration testing activities.
Perform source-level security reviews where applicable.
Validate fixes and conduct re-testing after remediation.
Collaborate with development, DevOps, and product teams to improve application security posture.
Prepare detailed technical and executive-level security assessment reports.
Stay current with emerging threats, attack techniques, and security best practices.
Mandatory Skills
Strong hands-on experience in Web Application Penetration Testing.
Experience in Mobile Application Security Testing (Android/iOS).
Proficiency in Burp Suite (Mandatory).
Strong Understanding Of
OWASP Top 10
OWASP Mobile Top 10
Authentication & Authorization Testing
API Security Testing
Session Management & Access Control Testing
Experience With Security Tools Such As
Burp Suite Professional
OWASP ZAP
Nessus
Nmap
Metasploit
Postman/API Security Tools
Preferred Skills
Experience in AI/LLM Application Security Testing.
Knowledge Of AI-specific Vulnerabilities Such As
Prompt Injection
Jailbreak Attacks
Data Leakage
Model Abuse
Insecure Output Handling
LLM Security Testing (OWASP Top 10 for LLMs)
Experience testing applications integrated with OpenAI, Azure OpenAI, Gemini, Claude, or other AI platforms.
Familiarity with cloud security concepts (Azure/AWS/GCP).
Qualifications
Bachelor's degree in Computer Science, Cyber Security, Information Technology, or related field.
Relevant Certifications Preferred
CEH
OSCP
eWPT
eCPPT
CREST
GWAPT
What We Are Looking For
Strong analytical and problem-solving abilities.
Excellent report writing and communication skills.
Ability to independently perform end-to-end security assessments.
Passion for ethical hacking, security research, and emerging AI security technologies.
Must Have: Web/Mobile Application VAPT, Burp Suite (Mandatory), hands-on penetration testing experience.
Good to Have: AI/LLM Application Security Testing experience.
