Senior Penetration Tester

Application Penetration Testing Lead

Location : Hyderabad

Mode : Hybrid

Role Overview

The Application Penetration Testing Lead will own and execute advanced application security testing across web, mobile, cloud and API platforms. This role focuses on manual penetration testing and dynamic testing methodologies to identify and remediate vulnerabilities, lead a small team of testers, and work with development and architecture teams to improve the organisations application security posture.

Key Responsibilities

• Lead and perform end-to-end penetration tests for web, mobile, cloud and API applications, including dynamic testing, exploitation, and validation of fixes.
• Plan, execute, and author high-quality pen test reports with actionable remediation steps, risk ratings, and retest guidance.
• Perform architecture and design reviews from a runtime / attack-surface perspective to inform pentest scope and high-risk areas.
• Execute dynamic application security testing (DAST) and manual verificationfocusing on runtime attack vectors and exploitability.
• Use manual testing techniques (logic flaws, business logic abuse, chained vulnerabilities) beyond automated scan coverage.
• Utilize and maintain a toolkit of offensive security tools (Burp Suite Pro, OWASP ZAP, intercepting proxies, fuzzers, scanners, Nmap, etc.).
• Conduct vendor / third-party application penetration assessments and evaluate external integrations.
• Drive remediation by working closely with developers, architects, and product teams;

prioritize vulnerabilities and define risk-based SLAs for closure.

adapt test methodologies accordingly.

Preferred Qualifications