Penetration Tester

Company: Happiest Minds

Website: Visit Website

Business Type: Enterprise

Company Type: Service

Business Model: B2B

Funding Stage: IPO/Public

Industry: Information Technology and Services

Salary Range: ₹ 20-30 Lacs PA

Job Description We are looking for an experienced Penetration Tester to perform comprehensive security assessments across web, API, mobile, and thick-client applications. The role requires strong hands-on expertise in manual penetration testing , vulnerability assessment, and secure configuration reviews, along with the ability to clearly communicate risks to technical and business stakeholders.

What You'll Do

• Conduct manual and automated application security testing for Web, API, and Thick Client applications.
• Perform manual penetration testing using OWASP methodologies and checklists.
• Execute DAST assessments covering OWASP Top 10 vulnerabilities.
• Perform manual source code reviews to identify security flaws.
• Conduct Mobile Application VAPT (both Static and Dynamic analysis).
• Carry out security configuration reviews and vulnerability assessments.
• Prepare detailed security assessment reports with risk ratings and remediation guidance.
• Effectively explain identified vulnerabilities and business impact to non-technical stakeholders.

What We're Looking For

• 3 to 7 years of experience conducting Application Security assessments
• Experienced in conducting Manual and Automated DAST for Web, API & Thick client covering OWASP Top 10
• Experienced in conducting Manual code review
• Experienced in Mobile VAPT (Both static and Dynamic)
• Knowledge of Infra VAPT or at least VA and configuration review
• Knowledge in Container / Docker security / Cloud Audit is a plus
• Certifications such as CEH, CRTP, OSCP are preferred
• Good communication skills, ability to explain vulnerabilities to business users in simple terms.

Core Skills

• Manual Penetration Testing using OWASP methodologies and checklists
• Application Penetration Testing (Web, API, Thick Client)
• OWASP Top 10
• Security Configuration Review