Senior Penetration test engineer

Company Profile:
Founded in 1976, CGI is among the largest independent IT and business consulting services firms in the world. With 94,000 consultants and professionals across the globe, CGI delivers an end-to-end portfolio of capabilities, from strategic IT and business consulting to systems integration, managed IT and business process services and intellectual property solutions. CGI works with clients through a local relationship model complemented by a global delivery network that helps clients digitally transform their organizations and accelerate results. CGI Fiscal 2024 reported revenue is CA$14.68 billion and CGI shares are listed on the TSX (GIB.A) and the NYSE (GIB). Learn more at cgi.com.
Job Title: Penetration Testing
Position: Senior Test Engineer
Experience: 4+ Years
Category: Software Development/ Engineering
Shift: General
Main location: Bangalore/Hyderabad/Chennai
Position ID:
Employment Type: Full Time
Education Qualification: Bachelors degree in computer science or related field or higher with minimum 8 years of relevant experience.
Position Description:
We are looking for an experienced Test Engineer/Sr. Test Engineer Penetration Testing- to join our team. The ideal candidate should be passionate about coding and developing scalable and high-performance applications.
#LI-AS26

Perform penetration testing on web applications, APIs, mobile applications, thick clients, and enterprise platforms including SAP
Conduct manual and automated vulnerability assessments and security testing
Identify and exploit vulnerabilities such as SQL Injection, XSS, CSRF, IDOR, and RCE
Manage vulnerability lifecycle including identification, validation, prioritization, and tracking
Perform secure code reviews and validate SAST findings
Use security tools such as Burp Suite, Nmap, Metasploit, Nessus, SQLMap, OWASP ZAP, and Checkmarx
Apply knowledge of OWASP Top 10, CVE, CWE, and CVSS frameworks
Prepare detailed vulnerability reports with risk ratings and remediation recommendations
Communicate security findings to both technical and non-technical stakeholders
Collaborate with developers and application teams to remediate vulnerabilities
Support security testing integration within SDLC and CI/CD pipelines

Must-Have Skills
4-8 years of experience in penetration testing and application security
Strong hands-on experience in manual and automated security testing
Expertise in web, API, mobile, and enterprise application security testing
Deep understanding of OWASP Top 10 vulnerabilities and exploitation techniques
Strong knowledge of CVE, CWE, and CVSS scoring systems
Hands-on experience with tools like Burp Suite, Nmap, Metasploit, Nessus, SQLMap, OWASP ZAP, and Checkmarx
Experience in secure code review and SAST validation
Strong understanding of authentication, authorization, and session management mechanisms
Excellent analytical, problem-solving, and debugging skills
Strong communication and reporting skills
Good-to-Have Skills
Experience in SAP security testing
Knowledge of cloud security in AWS, Azure, or GCP
Familiarity with DevSecOps and CI/CD security practices
Experience with DAST, SAST, and IAST tools
Relevant certifications such as OSCP, OSWE, CEH, GWAPT, or CISSP
Experience in threat modeling and risk assessment
Exposure to bug bounty programs or red team exercises

Together, as owners, lets turn meaningful insights into action.

Life at CGI is rooted in ownership, teamwork, respect and belonging. Here, youll reach your full potential because

You are invited to be an owner from day 1 as we work together to bring our Dream to life. Thats why we call ourselves CGI Partners rather than employees. We benefit from our collective success and actively shape our companys strategy and direction.

Your work creates value. Youll develop innovative solutions and build relationships with teammates and clients while accessing global capabilities to scale your ideas, embrace new opportunities, and benefit from expansive industry and technology expertise.

Youll shape your career by joining a company built to grow and last. Youll be supported by leaders who care about your health and well-being and provide you with opportunities to deepen your skills and broaden your horizons.

That same commitment to fairness extends to how we use technology. To support our recruitment team, AI tools may be used to help assess applications though they never replace human judgement. All hiring decisions remain entirely in the hands of our recruitment professionals.

Come join our teamone of the largest IT and business consulting services firms in the world.