Application Security & Infra VAPT - Penetration Tester

Job highlights

• Application Security - Required Skills . 2+ years of hands-on experience in Application Security / AppSec / VAPT . . Strong understanding of OWASP Top 10 and application security fundamentals. . Hands-on experience in Web and API Security Testing .
• Preferred Certifications . CEH. eWPT / eMAPT. OSCP / OSWE. CREST or equivalent. CCNA for Infrastructure VAPT profiles

Department: Cybersecurity - Security Testing

Experience: 2+ Years

Location: Andheri / Dombivli

Employment Type: Full-Time

Joining Preference: Immediate Joiners Preferred

About the Role

Talakunchi Networks Pvt. Ltd. is looking for experienced and technically skilled Penetration Testers / Security Analysts to join our Security Testing team.

The role involves hands-on security assessments across Application Security, Web/API/Mobile Security Testing, Secure Code Review and Infrastructure VAPT. Candidates will work on real-world security engagements, vulnerability identification, remediation validation, client interactions and compliance-driven security assessments, particularly within BFSI and payment environments.

Key Responsibilities

• Perform Application Security Testing and Infrastructure VAPT based on defined methodologies and industry standards.
• Conduct Web, API and Mobile Application Security Testing.
• Perform infrastructure VAPT across servers, networks, firewalls, endpoints and related components.
• Identify, validate and assess security vulnerabilities and misconfigurations.
• Analyze authentication, authorization, access control, session management, business logic and API security.
• Conduct Secure Code Review (SCR) and identify insecure coding practices where applicable.
• Perform vulnerability retesting and remediation validation.
• Prepare detailed security assessment and VAPT reports with evidence, impact, risk ratings and remediation recommendations.
• Work closely with development, infrastructure, application and customer teams to address security findings.
• Support security assessments for BFSI, banking, UPI and payment applications.
• Support PCI-DSS and other security compliance assessments.
• Participate in client discussions, technical walkthroughs and security review meetings.
• Maintain assessment documentation and ensure timely completion of assigned deliverables.

Application Security - Required Skills

• 2+ years of hands-on experience in Application Security / AppSec / VAPT.
• Strong understanding of OWASP Top 10 and application security fundamentals.
• Hands-on experience in Web and API Security Testing.
• Exposure to Mobile Application Security Testing is preferred.
• Understanding of JWT, OAuth, authentication, authorization and business logic vulnerabilities.
• Hands-on experience with tools such as Burp Suite, Postman and OWASP ZAP.
• Experience with MobSF, Frida or Objection is an advantage.
• Basic understanding of programming languages such as Java, Python, .NET or equivalent.
• Secure Code Review experience is an advantage.

Infrastructure VAPT - Required Skills

• 2+ years of hands-on experience in Infrastructure VAPT / Penetration Testing.
• Strong understanding of TCP/IP, DNS, routing, switching and firewalls.
• Experience assessing servers, networks, endpoints and infrastructure components.
• Knowledge of common infrastructure vulnerabilities, misconfigurations and attack vectors.
• Hands-on experience with tools such as Nmap, Nessus, Wireshark or similar.
• Ability to validate vulnerabilities and provide practical remediation recommendations.
• Strong report writing and technical documentation skills.

BFSI Compliance Exposure

Experience in any of the following will be preferred:

• Banking / BFSI environments
• UPI and payment applications
• PCI-DSS assessments
• Security compliance audits
• Client-facing security assessment engagements

Team Coordination Client Interaction

• Coordinate with junior security testers and support task allocation where required.
• Review vulnerability findings and security reports for technical accuracy.
• Mentor junior team members on security testing methodologies and vulnerability validation.
• Coordinate with developers, infrastructure teams, application owners and client stakeholders.
• Track remediation, retesting and closure of identified vulnerabilities.
• Participate in client meetings and explain technical findings and remediation requirements.

Preferred Certifications

• CEH
• eWPT / eMAPT
• OSCP / OSWE
• CREST or equivalent
• CCNA for Infrastructure VAPT profiles

Practical hands-on experience will be preferred over certification alone.

Qualification

• Bachelors degree in Computer Science, Information Technology, Cybersecurity or an equivalent field.
• 2+ years of relevant cybersecurity experience.
• Immediate joiners are preferred.
• Candidates serving a notice period may also be considered based on the requirement.
• Strong analytical and problem-solving skills.
• Excellent technical documentation and communication skills.
• Ability to work in a structured, client-facing and compliance-driven environment.
• Willingness to travel to customer locations as required.

Important Instructions

• Candidates must upload their educational and relevant qualification documents under Additional Documents in HRMS.
• Candidates should be comfortable working from the Andheri/Dombivli office and customer locations as required.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.