Application Security & Penetration Testing

Job Description – Application Security & Penetration Testing

Position: Application Security & Penetration Testing Specialist

Department: Information Security / Cybersecurity

Assignment Duration: 4 Months

Industry: IT / Technology / Information Security

Employment Type: Contract / Project Assignment

Location: Andheri Mumbai.

Job Summary

We are looking for an experienced Application Security & Penetration Testing professional for a 4-month project assignment. The role will focus on application security assessments, penetration testing, vulnerability identification, security testing across web/mobile/API environments, and providing actionable remediation recommendations.

Key Responsibilities

• Perform Application Security Assessments using Black Box, Grey Box, and White Box testing methodologies for web and enterprise applications.
• Conduct Mobile Application Security Testing for Android and iOS applications to identify security vulnerabilities.
• Perform API Security Testing covering authentication, authorization, data exposure, and API-specific security vulnerabilities.
• Execute Vulnerability Assessment and Penetration Testing (VAPT) across web applications, mobile applications, operating systems, and network infrastructure.
• Conduct SAST (Static Application Security Testing) and DAST (Dynamic Application Security Testing) to identify security flaws throughout the software development lifecycle.
• Support integration of security best practices into SDLC and DevSecOps processes.
• Assess applications against the OWASP Top 10 and recommend appropriate remediation measures.
• Utilize security tools such as Burp Suite, Nessus, and Nmap for vulnerability assessment, penetration testing, and network discovery.
• Perform OS and Network VAPT to identify infrastructure vulnerabilities and security gaps.
• Prepare detailed vulnerability assessment and penetration testing reports, including risk ratings, Proof of Concepts (PoCs), technical findings, and remediation recommendations.
• Collaborate with development, infrastructure, DevOps, and security teams to validate and remediate identified vulnerabilities.
• Conduct vulnerability retesting to verify successful remediation.
• Maintain proper documentation of security findings, testing activities, and remediation status.
• Stay updated on emerging cybersecurity threats, vulnerabilities, attack techniques, and industry best practices.
• Contribute to continuous improvement of the organization's application security and overall security posture.

Required Technical Skills

• Web Application Security Testing
• Mobile Application Security – Android & iOS
• API Security Testing
• VAPT / Penetration Testing
• Black Box / Grey Box / White Box Testing
• SAST & DAST
• OWASP Top 10
• SDLC / Secure SDLC
• DevSecOps
• OS Security Testing
• Network Security & VAPT
• Vulnerability Assessment
• Risk Assessment & Risk Rating
• Vulnerability Remediation & Retesting
• Security Reporting & Documentation

Tools & Technologies

Hands-on experience with security tools such as:

• Burp Suite
• Nessus
• Nmap
• Other relevant vulnerability assessment and penetration testing tools

Preferred Candidate Profile

• Bachelor's/Master's degree in Cybersecurity, Computer Science, Information Technology, or a related field.
• Hands-on experience in Application Security, VAPT, Penetration Testing, or Cybersecurity.
• Strong understanding of web, mobile, API, operating system, and network security.
• Good knowledge of OWASP Top 10 and common application security vulnerabilities.
• Strong analytical and problem-solving skills.
• Ability to document technical findings clearly and provide practical remediation recommendations.
• Good communication and collaboration skills.

Key Deliverables

• Application security assessment reports
• Web, mobile, API, OS, and network VAPT reports
• Vulnerability identification and risk classification
• Proof of Concepts (PoCs)
• Remediation recommendations
• Vulnerability retesting reports
• Periodic security assessment status reports

Assignment Duration

4 Months – Application Security & Penetration Testing Project

Suitable Profiles:

Application Security Engineer | Application Security Analyst | Penetration Tester | VAPT Engineer | Cybersecurity Analyst | Security Testing Engineer | Ethical Hacking Specialist | Information Security Analyst.

Pay: ₹50,000.00 - ₹55,000.00 per month

Work Location: In person