Senior Penetration Tester
Aveva · Hyderabad · onsite · Posted 8d ago
Undisclosed5–10 yrsfulltimeSourced from
About a minute. You'll make an account on the way through.
About this role
Job Summary
Location
Employment type
Qualifications
Key responsibilities
Essential requirements
Desired skills and competencies
Rd at AVEVA
Hybrid working
We are seeking a skilled and self-directed Senior Penetration Tester with 5+ years of experience to join AVEVAs Product Security team. The ideal candidate is a technically well-rounded professional who can independently lead and execute penetration tests from scoping through final report delivery, with minimal oversight. This role demands breadth across attack surfaces including Web, APIs, OT, Mobile, as well as the depth to uncover complex vulnerabilities in both modern and legacy technology stacks.
Location
Preferred: Bangalore, India with hybrid ~40% office, ~60% remote.
Available alternatives: Hyderabad, Mumbai, or fully remote.
Employment type
Regular, full-time, hybrid work arrangement
Qualifications
Experience executing penetration tests independently
Key responsibilities
- Use a risk-based approach to rapidly identify the highest impactissues
- Articulate technical and business risk of discovered issues
- Coordinate security assessments with external service providers
- Contribute to development of testing methodology, playbooks, and tooling
Essential requirements
- Ability to plan, scope and independently execute end-to-end penetration tests
- Experience producing high-quality reports with reproducible evidence and proof-of-concepts
- Experience working directly with product teams during test and retest phases
- Ability to provide actionable remediation and mitigation guidance aligned with industry practices
- Frontier knowledge in state-of-the-art penetration testing techniques relevant to the evolving threat landscape
Desired skills and competencies
- One or more relevant certifications (e.g. CEH, OSCP, GWAPT, or HTB)
- Penetration testing of Web Applications, Web APIs, and Industrial software targets
- Experience testing API protocols such as REST, gRPC, GraphQL, WebSocket
- Established application security community presence (e.g. blog, presentations, attributed CVEs)
- Experience using penetration testing tools such as Burp Suite Pro, SQLMap, SysInternals
Rd at AVEVA
Our track record of innovation is no fluke its the result of a structured and deliberate focus on learning, collaboration and inclusivity. If you want to build applications that solve big problems and do impactful work, join us!
Hybrid working
We work in a hybrid way at AVEVA. Most roles are based at a local AVEVA office, with an expectation of being on-site 50% of your working hours to support collaboration and connection. Some positions are fully office-based depending on the nature of the work, and certain roles that support specific customers or markets may be remote. The working arrangement for this position will be confirmed during the hiring process.
Sourced from naukri
Skills
GraphQLgRPCweb applicationsapisOTcehArticulateBurp SuiteOscpWeb APIsFrontierproduct securityChemicalsapi protocolsIndustrial SoftwareApplication SecurityPenetration Testingoperationsbusiness strategyrecruiter
About AVEVA
Aveva
Software Product
1.3k+
employees
1967
59 years old
Hyderabad / Secunderabad, Telangana
India
About
AVEVA harness the power of ecosystem, to deliver solutions and expertise to optimize engineering, operations and performance.
Industries
Software ProductInternetHardware & Networking
Employee ratings
569 reviews
4.0/ 5
Culture
4.1
Career growth
3.4
Work-life
4.3
Employees rate it well for
Work Life Balance191Work Culture150Salary103Career Growth70Senior Management56
Find them on