Web Application Penetration Testing Job at Randstad (Bengaluru)

Web Application Penetration Testing

Location

India , Bengaluru

Salary:

Not provided

Randstad

Expiration Date

February 17, 2026

Requirements

Perform manual application penetration tests on one or more of the following to discover and exploit vulnerabilities: web applications, internal applications, APIs and mobile applications
3+ years of professional experience in cybersecurity, with a focus on Web application penetration testing
Strong understanding of web applications, cryptography, various operating systems and security technologies
Strong understanding of exploitation of Microsoft platform used in enterprise environment such as windows Servers, Active Directory Certificate Service, Azure, etc.
Relevant certifications, such as GWAPT, OSCP, OSEP, CRTP, CRTO, OSWA, are strongly preferred

Application Penetration Tester

We are looking for security engineer who loves solving interesting problems and ...

Location

Poland , Warszawa

Salary:

Not provided

Robert Bosch Sp. z o.o.

Expiration Date

Until further notice

Requirements

Minimum 5 years of combined experience in penetration testing and security engineering roles
Professional certifications such as OSCP, CEH, CISSP, CISM, or equivalent
Advanced level of understanding of OWASP Top 10, CVE, general security controls, and other foundational topics such as the latest web application system exploits
Attacker mindset for breaking the websites with practical knowledge of OWASP
Commanding knowledge of VAPT concepts and best practices, including the requirements for WhiteHat/ethical hacking
Expert understanding of the difference between a vulnerability assessment and a penetration test in the context of assessment scope, objectives, and deliverables
In depth experience with common automated VAPT tools such as Nessus, Burp Suite
Proficiency with other common attack tools and frameworks such as Wireshark, Kali, Metasploit, etc.
Working knowledge of DevSecOps, CIS Security benchmarks, scripting languages (Python, PowerShell, Bash) for automation
Fluent English (both verbal and written)

Job Responsibility

Black-box and Grey Box penetration test applications
Security testing including reverse engineering of Mobile applications (Android and iOS)
Create innovative attacks tools/automations for project specific needs
Communicate complex vulnerability results to technical and non-technical audience
Perform research and contribute to open-source community on new attack methodology, vulnerability findings
Scope penetration tests and contribute to penetration test project management

What we offer

Competitive salary + annual bonus
Hybrid work with flexible working hours
Referral Bonus Program
Copyright costs for IT employees
Private medical care and life insurance
Cafeteria System with multiple benefits (incl. MultiSport, shopping vouchers, cinema tickets, etc.)
Prepaid Lunch Card
Number of benefits for families (for instance summer camps for kids)
Non-working day on the 31st of December

Fulltime

IT Security Specialist

Amla Commerce is looking for an experienced IT Security Specialist to join our t...

Location

United States , Milwaukee

Salary:

Not provided

Amla Commerce

Expiration Date

Until further notice

Requirements

Bachelor's degree in Computer Science, Information Technology, or a related field
Minimum 2 Years of relevant work experience
Proven experience in infrastructure security, manual penetration testing, vulnerability assessment, and web application security
Strong knowledge of penetration testing tools and frameworks, including Burp Suite, Owasp Zap, and Metasploit Framework
Familiarity with OWASP Top 10 vulnerabilities and best practices for securing web applications
Experience with IDS/IPS tools for monitoring and preventing intrusions
Familiarity with wireless/Wi-Fi security protocols, encryption standards, and best practices
Knowledge of network and system security protocols, technologies, and best practices
Strong problem-solving skills and ability to think strategically about security risks and solutions
Excellent communication and interpersonal skills to effectively collaborate with cross-functional teams and stakeholders

Job Responsibility

Conduct manual penetration testing of infrastructure systems, networks, and applications to identify security vulnerabilities and potential risks
Utilize various penetration testing tools such as Nmap, Nessus, Burp Suite, Owasp Zap, and Metasploit Framework to identify and exploit vulnerabilities
Perform vulnerability assessments using both manual approaches and vulnerability assessment and penetration testing (VAPT) tools like Nessus, OpenVAS, and Qualys
Collaborate with the development team to enhance the security of web applications by implementing secure coding practices and addressing OWASP Top 10 vulnerabilities
Configure and manage web application firewalls (WAF) to protect against common web-based attacks
Implement and maintain infrastructure firewalls, ensuring that proper configurations are in place to protect the network and systems from unauthorized access
Manage IP access control lists and handle blocking/unblocking requests as per security policies
Ensure compliance with SOC (Security Operations Center) standards and participate in audits and assessments
Provide end user system security by deploying and managing antivirus solutions, conducting security awareness training, and responding to security incidents
Stay up-to-date with the latest security threats, vulnerabilities, and industry best practices to proactively identify potential risks and recommend mitigation strategies

Senior Consultant - Offensive Security

The Senior Consultant on the Offensive Security team is focused on assessing and...

Location

Japan

Salary:

Not provided

Palo Alto Networks

Expiration Date

Until further notice

Requirements

3+ years of professional experience with risk assessment tools, technologies, and methods focused on Information Assurance, Information Systems/Network Security, Infrastructure Design, and Vulnerabilities Assessments
Demonstrate a deep understanding of how malicious software works (i.e.-malware, trojans, rootkits, etc.)
Ability to modify known and/or craft custom exploits manually without dependence on consumer tools such as Metasploit
Knowledge of tools and techniques used to conduct network, wireless, and web application penetration testing
Familiarity with web application penetration testing and code auditing to find security gaps and vulnerabilities
Knowledge and experience in conducting cyber risk assessments using industry standards
Experience with penetration testing, administering, and troubleshooting major flavors of Linux, Windows, and major cloud IaaS, PaaS, and SaaS providers (i.e., AWS, GCP, and Azure)
Experience with security assessment tools
Knowledge of network vulnerability assessments, web and cloud application security testing, network penetration testing, red teaming, security operations, or 'hunt'
Knowledge of computer forensic tools, technologies, and methods

Job Responsibility

Conducts periodic scans of networks to find and detect vulnerabilities
Performs client penetration testing to find any vulnerabilities or weaknesses that might be exploited by a malicious party, using open-source, custom, and commercial testing tools
Ability to assist in scoping engagements by clearly articulating various penetration approaches and methodologies to audiences ranging from highly technical to executive personnel
Report generation that clearly communicates testing and assessment details, results, and remediation recommendations to clients
Develop scripts, tools, and methodologies to automate and streamline internal processes and engagements
Conducts IT application testing, cybersecurity tool and systems analysis, system and network administration, and systems engineering support for the sustainment of information technology systems (mobile application testing, penetration testing, application, security, and hardware testing)
Conduct threat hunting and/or compromise assessment engagements to identify active or dormant indicators of compromise (IoCs) using Crypsis and Palo Alto Networks’ threat hunting tools (and/or client owned hunting instrumentation where applicable)
Conduct cloud penetration testing engagements to assess specific workloads (i.e., AWS, GCP, Azure, containers, or other PaaS and SaaS instances) for vulnerabilities and subsequently attempt to exploit identified weakness after receiving permission from client stakeholders
Provide recommendations to clients on specific security measures to monitor and protect sensitive data and systems from infiltration and cyber-attacks including response and recovery of a data security breach
Ability to perform travel requirements as needed to meet business demands

What we offer

FLEXBenefits wellbeing spending account with over 1,000 eligible items selected by employees
mental and financial health resources
personalized learning opportunities

Fulltime

Senior Application Security Researcher

The JFrog CSO Security team is looking for a Senior Application Security Researc...

Location

Israel , Netanya/Tel Aviv

Salary:

Not provided

JFrog

Expiration Date

Until further notice

Requirements

4+ years of hands-on experience in an application security role
Experience with Web Penetration Testing (Hands On) - Mandatory
Strong coding skills, preferably in Java, Golang, and JavaScript - Mandatory
Experience with cloud environments - an advantage
Experience with microservices (Docker, K8S, Service Mesh) - an advantage
Excellent problem-solving skills and the ability to work independently with a strong sense of ownership
Good communication skills and a true passion to educate others and achieve continuous improvement

Job Responsibility

Continuously assess and challenge JFrog’s overall security posture to ensure optimal and up-to-date platform security in our products and systems
Evaluate architecture, design, and code to ensure they are free from potential vulnerabilities and security risks
Train and mentor developers about security frameworks, testing, vulnerabilities, and best practices to ensure code compliance
Evaluate new technologies and standards in the application security domain
Plan and lead cross-company efforts with the R&D that will improve JFrog’s security posture

Application Security Analyst

An application security analyst is a trained professional responsible for provid...

Location

United States

Salary:

100000.00 - 115000.00 USD / Year

Ann Taylor

Expiration Date

Until further notice

Requirements

Education and/or Certifications in Computer Science, Information Systems, other related field, or equivalent work experience
3-5+ years of IT work experience, with at least 2 years of experience working in Application security
Working experience with security testing tools (DAST, SAST, SCA)
Hands on experience with manual web application penetration testing (VAPT)
Proficient in Burp suite and Kali Linux tools
Experience on API testing
Knowledge of secure coding practices/frameworks such as OWASP, SSDF
Strong knowledge of application security principles
Knowledge on Threat Modeling and DevSecOps
Strong working knowledge of IT Security best practices

Job Responsibility

Conduct application security assessments to identify and mitigate security risks
Perform DAST scans for the internal and external applications
Conduct end-to-end Pentest engagement for E-commerce applications
Perform False positive analysis for vulnerabilities from scan results
Analyze the security risks and create vulnerability report with recommendations
Work collaboratively with cross-functional teams to identify and solve complex security problems
Work on ad hoc SAST scan requests and vulnerability analysis
Participate in incident response activities and provide technical guidance on security-related incidents
Develop and maintain technical documentation related to application security

What we offer

Merchandise discount at select KnitWell Group brands
Support for individual development plus opportunities for career mobility
A culture of giving back – local volunteer opportunities, annual donation and volunteer match to eligible nonprofit organizations, and philanthropic activities
Medical, dental, vision insurance & 401(K)
Employee Assistance Program (EAP)
Time off – paid time off & holidays

Fulltime

Cybersecurity Red Team Project Manager

The Cyber Security Project Manager focuses on coordinating penetration testing p...

Location

Belgium , Brussels

Salary:

Not provided

Sopra Steria

Expiration Date

Until further notice

Requirements

Technical expertise in system security vulnerabilities, remediation techniques, and network/web protocols (e.g., TCP/IP, UDP, IPSEC, HTTP)
experience in network, web application, and mobile penetration testing
familiarity with penetration testing tools and suites (e.g., Kali Linux, Burp Suite, Metasploit, Cobalt Strike, Mimikatz)
understanding of vulnerability scoring systems (CVSS) and frameworks (MITRE ATT&CK)
software development skills (C/C++, Java, Python) are advantageous
at least one relevant security certification (e.g., CEH, GPEN, GXPN, OSCP, OSC, or equivalent).

Job Responsibility

Coordinate all project activities with internal stakeholders (Lead Penetration Tester, Awareness Expert, Technical Quality Manager) and the customer
plan and execute penetration testing tasks, including scoping meetings and drafting the penetration testing plan
prepare and control access rights for penetration tests
refine and manage the security test calendar/schedule, ensuring tasks are executed according to plan
proactively inform stakeholders (e.g., ECB) about issues such as delays, resource unavailability, or other factors affecting testing or timelines
oversee quality assurance for penetration tests, including reviewing penetration testing reports
coordinate threat-based testing with the Lead Penetration Tester and awareness sessions with the Awareness Expert
support process improvement and documentation of vulnerability management in collaboration with the Technical Quality Manager
facilitate stakeholder communication and ensure completeness of handovers and knowledge transfer between resources.

What we offer

Mobility options (including a company car)
insurance coverage
meal vouchers
eco-cheques
continuous learning opportunities through the Sopra Steria Academy
the opportunity to connect with fellow Sopra Steria colleagues at various team events.

Fulltime

Security and Application Security Engineer

Beacon Technologies is seeking a Security and Application Security Engineer. The...

Location

United States , Las Vegas

Salary:

Not provided

Beacon Technologies

Expiration Date

Until further notice

Requirements

Minimum of five years of Information Security experience with at least two years of application-level security
Strong communication skills: ability to convey and document security guidelines, requirements, and coding best practices
Familiarity with Security Best Practices in common coding languages
Application Penetration Testing / API Security Testing
Software Development Life Cycle Design and Implementation
Static and Dynamic Application Testing Tools and Methods
Container and orchestration security (Kubernetes, Docker, Octopus, GitHub, etc.)
Familiarity with Application Security Testing Frameworks such as OWASP
Strong logical and analytical thinker
exceptional skills in security systems solutions

Job Responsibility

Operate as a liaison between the Security Team and the Development Teams
Preserve PCI and SOX Security Certification programs with a primary focus on ensuring compliance with the appropriate industry standards and security controls
Supporting incident response and architecture review whenever applications security expertise is needed
Integrating threat modeling practices into the SDLC
Work with other staff to perform periodic scans and evaluation of system security including areas such as patch management, penetration testing, vulnerability assessments, and other types of InfoSec-related tasks
Assist in identifying and communicating security exposures, information security incidents or non-compliance situations to IT management or the CISO as appropriate. Duties may also include collecting and documenting cyber security and incident response event data as necessary.

What we offer

Career advancement opportunities
extensive training
excellent benefits including paying for health and dental premiums for salaried employees.

Fulltime

Web Application Penetration Testing

Randstad

Location:
India , Bengaluru

Category:
IT - Software Development

Contract Type:
Not provided

Salary:

Job Description:

Requirements:

Nice to have:

Additional Information:

Job Posted:
January 18, 2026

Expiration:
February 17, 2026

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Web Application Penetration Testing

Web Application Penetration Testing

Application Penetration Tester

IT Security Specialist

Senior Consultant - Offensive Security

Senior Application Security Researcher

Application Security Analyst

Cybersecurity Red Team Project Manager

Security and Application Security Engineer

Web Application Penetration Testing

Randstad

Location:India , Bengaluru

Category:IT - Software Development

Contract Type:Not provided

Salary:

Job Description:

Requirements:

Nice to have:

Additional Information:

Job Posted:January 18, 2026

Expiration:February 17, 2026

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Web Application Penetration Testing

Web Application Penetration Testing

Application Penetration Tester

IT Security Specialist

Senior Consultant - Offensive Security

Senior Application Security Researcher

Application Security Analyst

Cybersecurity Red Team Project Manager

Security and Application Security Engineer

Location:
India , Bengaluru

Category:
IT - Software Development

Contract Type:
Not provided

Job Posted:
January 18, 2026

Expiration:
February 17, 2026