Web Application Penetration Testing

2 weeks ago


Bengaluru, Karnataka, India Clarity Consulting Full time ₹ 20,00,000 - ₹ 25,00,000 per year

Roles & responsibilities

Manage cyber threat management projects and lead day-to-day

red team operations.

Plan, scope and conduct complex red team engagements:

external/internal network, Active Directory, cloud

(AWS/Azure/GCP), web & API, mobile backends, and

physical/social engineering components (phishing, vishing,

in-person tests).

Conduct comprehensive web & API testing: reconnaissance,

authenticated/unauthenticated testing, injection flaws

(SQLi/NoSQLi), RCE, SSRF, XSS, IDOR, broken

authentication/authorization, logic flaws, insecure deserialization,

unsafe file uploads and API misconfigurations; chain findings into

host footholds.

Conduct network & infrastructure testing: perimeter and internal

assessments, host/service enumeration, CVE-based exploitation,

pivoting, lateral movement, privilege escalation, persistence and

attack path mapping.

Execute Active Directory compromise exercises: Kerberos

abuse, Golden/Silver Ticket, ACL abuse, user/group privilege

escalation and Group Policy weaknesses.

Simulate stealthy adversary tradecraft (MITRE ATT&CK)

including OpSec, EDR/AV evasion, SIEM evasion and covert

payload delivery (HTML smuggling, advanced delivery chains).

Design, develop and customize offensive tooling and exploits;

maintain red team infrastructure (C2, payloads, automation).

Conduct cloud adversarial simulations: identity abuse,

misconfiguration chaining, and privilege escalation across cloud

services.

Plan and run social engineering campaigns and measure human

susceptibility; craft realistic pretexts using OSINT

Come as

you are

at KGS

As a firm, we are deeply

committed to diversity,

inclusion and equity at our

workplace. We offer a safe

and inclusive environment

built on trust, where all our

colleagues can bring their

authentic selves to work

and know that their

uniqueness is valued.

We prohibit unfair

treatment of applicants and

employees and

discrimination on any

ground, including but not

limited to, caste, religion,

color, ancestry, marital

status, medical condition,

sex, gender identity and/or

expression, sexual

orientation, age,

nationality, cultural origin,

family or parental status,

defense veterans,

physical, mental or

sensory disability or any

other status or

characteristic protected by

applicable Indian laws and

regulations.

Mandatory technical &

functional skills

Conduct red team exercises to evaluate and enhance the

organization's security posture. These exercises simulate

real-world attack scenarios to identify areas of weakness and

improve defenses.

Key activities include planning and executing simulated

attacks, analyzing security gaps, and providing actionable

recommendations for remediation

4+ years of professional experience in cybersecurity, with a

focus on Web application penetration testing.

Strong background in cybersecurity with a focus on

penetration testing.

Experience in Web and Network PT.

Relevant certifications such as OSCP, CRTP,CRTO.

Proficient in threat modeling and vulnerability exploitation

techniques.

Excellent analytical and problem-solving skills.



  • Bengaluru, Karnataka, India Randstad MENA Full time ₹ 6,00,000 - ₹ 18,00,000 per year

    Job Description Job Offer Closes: 20 December 2025SummaryLocation: Bengaluru, Karnataka Client: A client of Randstad India Employment Type: Temporary Posted On: 21 October 2025 Reference Number JPC Next StepsContact the recruiter Set a job alert Create an account Search jobs Job Details Mandatory Technical & Functional SkillsPerform manual...


  • Bengaluru, Karnataka, India Careernet Full time ₹ 8,00,000 - ₹ 24,00,000 per year

    Key Skills: Penetration Testing, Vulnerabilities, Web Application Security, Manual Testing.Roles & Responsibilities:Conduct manual application penetration tests on web applications, internal applications, APIs, and mobile applications to discover and exploit vulnerabilities.Independently research new vulnerabilities in systems and software, modifying and...

  • Penetration Tester

    6 days ago


    Bengaluru, Karnataka, India Artech Full time ₹ 15,00,000 - ₹ 20,00,000 per year

    Role & responsibilitiesMandatory technical & functional skillsPerform manual application penetration tests on one or more of the following to discover and exploit vulnerabilities: web applications, internal applications, APIs and mobile applications3 to 9 years of professional experience in cybersecurity, with a focus on Web application penetration...

  • Penetration Tester

    3 days ago


    Bengaluru, Karnataka, India Happiest Minds Technologies Full time ₹ 8,00,000 - ₹ 12,00,000 per year

    Sr. Penetration Testing engineerMandatory SkillsPenetration Testing, Web App, Mobile, Web Services/APIs, Network & blockchain.Skill to EvaluatePenetration-TestingExperience4 to 6 YearsLocationBengaluruJob DescriptionMaintain a good relationship with key stakeholders including business, other Application  & ISO teams to deliver on security requirements...

  • Penetration Tester

    2 weeks ago


    Bengaluru, Karnataka, India Kotak Mahindra Bank Full time ₹ 6,00,000 - ₹ 12,00,000 per year

    Software Test Engineering II-SUPPORT SERVICES-Applications-CTB Job Title: Penetration Tester (Web Applications and REST APIs) Location: Bengaluru Job Type: Full-time About Us: Kotak Mahindra Bank is seeking an experienced Penetration Tester to join our Platform Engineering team. As a Penetration Tester, you will be responsible for identifying...

  • Penetration Tester

    5 days ago


    Bengaluru, Karnataka, India Ntech IT Solutions Private Limited Full time ₹ 23,04,000 - ₹ 30,72,000 per year

    Title: Penetration TesterLocation: Bangalore (Hybrid)Job Type: Contract to HireOpenings: Years of exp needed)Must have skills - Offensive Security, Penetration Testing, Red TeamingPosition SummaryWe are seeking an experienced application penetration tester with expertise in both manual and automated testing to join our Security and Privacy Risk Consulting...

  • Penetration Tester

    3 days ago


    Bengaluru, Karnataka, India STAFFINGTON CONSULTING PRIVATE LIMITED Full time ₹ 20,00,000 - ₹ 25,00,000 per year

    Description :Duties and Responsibilities : - Conduct penetration tests on a wide range of digital assets, including networks, web applications, and mobile applications, to identify vulnerabilities and security weaknesses. - Collaborate with internal product and engineering teams to understand system setups, business goals, and constraints. -...


  • Bengaluru, Karnataka, India Grant Thornton Full time ₹ 12,00,000 - ₹ 36,00,000 per year

    2 - 5 Years1 OpeningBengaluruRole descriptionRole OverviewAs a Penetration Testing Engineer at Grant Thornton, you will conduct advanced security assessments across applications, networks, cloud environments, and enterprise systems. You will emulate real-world attack scenarios, identify vulnerabilities, and collaborate with engineering and client teams to...


  • Bengaluru, Karnataka, India UV Cyber Solutions Full time ₹ 12,00,000 - ₹ 36,00,000 per year

    Hiring for Application Security Testing -L3 - Staff Consultant UV Cyber -- (Hosur Main Road-Koramangala, Bangalore)Role : Application Security Testing -L3 - Staff ConsultantExperience: 5 yrs to 12 YrsNotice Period: 0 to 30 days(Applicants must attend face-to-face interview in Bangalore)Address: UV Cyber solutions,1ST Block,1ST Floor, PRESTIGE BLUE CHIP...


  • Bengaluru, Karnataka, India HSBC Full time

    Some careers shine brighter than others.If you're looking for a career that will help you stand out, join HSBC and fulfil your potential. Whether you want a career that could take you to the top, or simply take you in an exciting new direction, HSBC offers opportunities, support and rewards that will take you further. HSBC is one of the largest banking and...