Sr. Application Security Pentester

Sr. Application Security PentesterWe are seeking a highly skilled Senior Application Security Pentester with extensive experience in application security and penetration testing. The ideal candidate will have strong expertise in identifying and validating security vulnerabilities across web, mobile, network, and thick-client applications. This role requires hands-on penetration testing experience, strong communication skills, and the ability to provide actionable security recommendations to stakeholders.Application Security TestingPerform comprehensive application security assessments and penetration testing.Conduct security testing across web applications, web services, mobile applications, thick-client applications, and network infrastructure.Assist in defining the technical scope for security testing engagements.Review and validate security test cases periodically.Vulnerability Assessment & AnalysisAnalyze and curate vulnerability data from multiple security platforms and tools.Validate vulnerabilities through manual penetration testing to identify true exploitability.Perform code-level vulnerability assessments to eliminate false positives.Evaluate and prioritize vulnerabilities using CVSS scoring.Security ConsultingProvide clear, actionable security findings and recommendations to customers.Support clients in understanding vulnerabilities and remediation strategies.Offer technical guidance on security issues, disclosures, and risk mitigation.Assist member firms with vulnerability remediation activities.Security Tools & AutomationUtilize security testing tools such as Burp Suite for application assessments.Develop or support automation using scripting languages such as Python.Assist in developing security tooling, deployment strategies, and scanning configurations.Support code assessments and network infrastructure testing as required.Risk Management & Continuous ImprovementEscalate critical security risks and urgent issues to Regional Operations Managers.Drive continuous improvement initiatives for vulnerability management services.Contribute to enterprise risk reduction through proactive security testing.ExperienceMinimum 8+ years of hands-on experience in Penetration Testing.Strong background in Application Security assessments.Experience performing enterprise-level security testing engagements.Technical SkillsExpertise in Application Security.Hands-on experience with Burp Suite.Strong understanding of CVSS Scoring.Knowledge of Large Language Models (LLMs) and associated security considerations.Experience with Python or other scripting/automation languages.Understanding of SAST (Static Application Security Testing) and SCA (Software Composition Analysis) tools.Familiarity with secure coding practices and vulnerability validation.Penetration Testing ExpertiseWeb Application Penetration TestingWeb Services/API Penetration TestingNetwork Penetration TestingMobile Application Penetration TestingThick Client Penetration TestingManual Vulnerability ValidationCode AssessmentSoft SkillsExcellent written and verbal communication skills.Strong analytical and problem-solving abilities.Ability to provide consultative security guidance to customers.Experience working with cross-functional technical teams.Preferred CertificationsCISSPOSCPCPTCEPTCMWAPTEssential SkillsApplication SecurityPenetration TestingBurp SuiteCVSS ScoringPython ScriptingWeb & API Security TestingMobile Security TestingNetwork Penetration TestingThick Client TestingVulnerability AssessmentLLM SecuritySAST & SCAPreferred SkillsSecurity AutomationSecure Code ReviewVulnerability ManagementRisk AssessmentBFSI / Capital Markets domain experienceCompany Benefits & CultureInclusive and diverse work environmentOpportunities for professional growth and developmentComprehensive health and wellness benefits