Security Pen Tester

Infios

Penetration Tester enhancing security across SaaS applications at Infios. Conducting penetration tests, vulnerability assessments, and collaborating with engineering teams.

Posted 6/15/2026full-timeBangalore • 🇮🇳 IndiaMid-LevelSeniorWebsite

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

penetration testingvulnerability discoveryexploit developmentcloud securityweb application securityAPI testingmanual exploitationscriptingauthentication mechanismsdata leakage

Soft Skills

communicationcollaborationreport writingpresentation skillsremediation guidance

Tools & Technologies

Burp SuiteZAPNmapSQLMapAWSOCIAzureMicrosoft CopilotClaudePython

Industry Keywords

OWASPRESTGraphQLOAuthJWTSSOSAMLprompt injectionjailbreaksRAG attacks

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityGraphQLJavaScriptMicroservicesPythonSQL

About the role

Key responsibilities & impact

Conduct in-depth penetration tests on web applications, APIs, microservices, and internal SaaS components
Perform manual vulnerability discovery and exploitation following OWASP methodologies
Simulate adversarial attack scenarios and participate in RED Team exercises
Conduct cloud-focused penetration tests and configuration reviews (AWS, OCI and Azure)
Test LLM/AI features for prompt injection, jailbreaking, data leakage, model manipulation, and other emerging threats
Develop custom proof-of-concept exploits where applicable
Work closely with engineering and product teams to provide clear remediation guidance
Use and customize security testing tools (Burp Suite, ZAP, Nmap, SQLMap, etc.)
Develop scripts or small tools for automation or exploitation (Python, Bash, PowerShell, etc.)
Effectively use AI tools (Microsoft Copilot, Claude, etc.) to accelerate testing, generate payloads, summarize findings, and produce documentation
Create clear, detailed technical reports with reproduction steps and exploit evidence
Present findings to technical and leadership teams.

Requirements

What you’ll need

4+ years of hands-on experience in cybersecurity, with a focus on penetration testing
Strong understanding of OWASP Top 10 and practical experience exploiting them in real-world applications
Experience testing REST and GraphQL APIs
Solid understanding of web technologies (HTML, JavaScript, SQL, authentication mechanisms, etc.)
Proven experience performing manual exploitation (not just tool-based scanning)
Experience testing cloud-hosted applications and infrastructure (AWS, OCI and Azure)
Knowledge of modern authentication (OAuth, JWT, SSO, SAML)
(Preferred, Not Mandatory) Experience testing AI/LLM-powered features
Knowledge of prompt injection, jailbreaks, RAG attacks, model extraction, data leakage vectors

Benefits

Comp & perks

Equal opportunity employer
Commitment to inclusion in the workplace
Safe and welcoming environment