Senior Penetration test engineer

Position Description Company Profile: Founded in 1976, CGI is among the largest independent IT and business consulting services firms in the world. With 94,000 consultants and professionals across the globe, CGI delivers an end-to-end portfolio of capabilities, from strategic IT and business consulting to systems integration, managed IT and business process services and intellectual property solutions. CGI works with clients through a local relationship model complemented by a global delivery network that helps clients digitally transform their organizations and accelerate results. CGI Fiscal 2024 reported revenue is CA$14.68 billion and CGI shares are listed on the TSX (GIB.A) and the NYSE (GIB). Learn more at cgi.com. Job Title: Penetration Testing Position: Senior Test Engineer Experience: 8+ Years Category: Software Development/ Engineering Shift: General Main location: Bangalore/Hyderabad/Chennai Position ID: Employment Type: Full Time Education Qualification: Bachelor’s degree in computer science or related field or higher with minimum 8 years of relevant experience. Position Description: We are looking for an experienced Test Engineer/Sr. Test Engineer – Penetration Testing- to join our team. The ideal candidate should be passionate about coding and developing scalable and high-performance applications. Your future duties and responsibilities

• Perform penetration testing on web applications, APIs, mobile applications, thick clients, and enterprise platforms including SAP
• Conduct manual and automated vulnerability assessments and security testing
• Identify and exploit vulnerabilities such as SQL Injection, XSS, CSRF, IDOR, and RCE
• Manage vulnerability lifecycle including identification, validation, prioritization, and tracking
• Perform secure code reviews and validate SAST findings
• Use security tools such as Burp Suite, Nmap, Metasploit, Nessus, SQLMap, OWASP ZAP, and Checkmarx
• Apply knowledge of OWASP Top 10, CVE, CWE, and CVSS frameworks
• Prepare detailed vulnerability reports with risk ratings and remediation recommendations
• Communicate security findings to both technical and non-technical stakeholders
• Collaborate with developers and application teams to remediate vulnerabilities
• Support security testing integration within SDLC and CI/CD pipelines

Required Qualifications To Be Successful In This Role Must-Have Skills

• 8–10 years of experience in penetration testing and application security
• Strong hands-on experience in manual and automated security testing
• Expertise in web, API, mobile, and enterprise application security testing
• Deep understanding of OWASP Top 10 vulnerabilities and exploitation techniques
• Strong knowledge of CVE, CWE, and CVSS scoring systems
• Hands-on experience with tools like Burp Suite, Nmap, Metasploit, Nessus, SQLMap, OWASP ZAP, and Checkmarx
• Experience in secure code review and SAST validation
• Strong understanding of authentication, authorization, and session management mechanisms
• Excellent analytical, problem-solving, and debugging skills
• Strong communication and reporting skills Good-to-Have Skills
• Experience in SAP security testing
• Knowledge of cloud security in AWS, Azure, or GCP
• Familiarity with DevSecOps and CI/CD security practices
• Experience with DAST, SAST, and IAST tools
• Relevant certifications such as OSCP, OSWE, CEH, GWAPT, or CISSP
• Experience in threat modeling and risk assessment
• Exposure to bug bounty programs or red team exercises

Together, as owners, let’s turn meaningful insights into action. Life at CGI is rooted in ownership, teamwork, respect and belonging. Here, you’ll reach your full potential because… You are invited to be an owner from day 1 as we work together to bring our Dream to life. That’s why we call ourselves CGI Partners rather than employees. We benefit from our collective success and actively shape our company’s strategy and direction. Your work creates value. You’ll develop innovative solutions and build relationships with teammates and clients while accessing global capabilities to scale your ideas, embrace new opportunities, and benefit from expansive industry and technology expertise. You’ll shape your career by joining a company built to grow and last. You’ll be supported by leaders who care about your health and well-being and provide you with opportunities to deepen your skills and broaden your horizons. Come join our team—one of the largest IT and business consulting services firms in the world.