Lead Analyst - Security Testing

Sr. Test Engineer / Lead Analyst Security Testing

Experience : 3-10 Years

Category : Software Development/ Engineering

Main location : Bangalore / Hyderabad / Chennai / Mumbai / Pune

Employment Type : Full Time

Education Qualification : Bachelor's degree in computer science or related field or higher with minimum 3 years of relevant experience.

We are looking for a highly skilled Penetration Tester to be part of our offensive security initiatives. This role requires strong expertise in manual security testing, proficiency with Burp Suite, and a solid understanding of industry security standards and frameworks. The ideal candidate will not only conduct advanced penetration testing but also lead, mentor, and guide a team of testers, define methodologies, and ensure alignment with compliance and risk management frameworks.

Your future duties and responsibilities :

• Lead and perform advanced manual penetration testing across web, mobile, APIs, cloud, and infrastructure environments.
• Utilize Burp Suite Pro and other industry-standard tools for vulnerability identification, exploitation, and reporting.
• Define and improve penetration testing methodologies, processes, and best practices.
• Manage and mentor junior testers, reviewing their findings and ensuring quality deliverables.
• Act as primary point of contact for security testing engagements with clients and internal stakeholders.
• Provide strategic recommendations on risk remediation and secure development practices.
• Align testing practices with security frameworks, including :
• OWASP ASVS v5
• OWASP Top 10 (2021)
• NIST 800-115
• ISO/IEC 27001/27002
• PCI DSS (where applicable)
• Participate in threat modeling exercises, red team/blue team activities, and adversary simulations.
• Prepare and present executive-level reports and conduct stakeholder briefings.
• Stay ahead of emerging threats, tools, and techniques, and introduce relevant innovations into the testing practice.

Required qualifications to be successful in this role :

• Must to have skills-Penetration testing, DAST Testing, SAST Testing, OWASP top 10
• 3+Years years of experience in penetration testing.
• Advanced skills in manual testing, exploitation techniques, and vulnerability chaining.
• Proficiency in Burp Suite Pro (all modules) and other tools such as Metasploit, Nmap, Nessus, etc.
• Strong understanding of cloud security testing (AWS, Azure, GCP).
• Experience in secure SDLC, DevSecOps, and integrating security testing into CI/CD pipelines.
• Familiarity with scripting/programming (Python, PowerShell, Bash, JavaScript, etc.).
• Demonstrated ability to mentor, coach, and lead teams.
• Excellent client communication and presentation skills.