JD:
Advanced Penetration Tester (Product Security) / Threat Simulation:
We are looking for a highly skilled and hands on
Application Security / Penetration Testing Specialist
to drive advanced security validation initiatives focused on hardening key Assurance products.
The role involves simulating sophisticated attacker behaviors (beyond standard VAPT), identifying deep vulnerabilities, and strengthening the overall security posture of enterprise applications and platforms.
This is a niche requirement requiring strong expertise in
advanced manual testing, product security, and attack simulation , working closely with engineering teams.
Key Responsibilities
Perform
advanced penetration testing
on products, focusing on deep and complex vulnerabilities
Simulate
real world attack scenarios
and multi step attack paths (beyond standard scans)
Conduct
manual testing
(not tool driven), covering business logic, APIs, and product level weaknesses
Analyze
attack paths, exploit chains, and system behavior
under simulated attack conditions
Leverage existing
tools, scripts, and internal frameworks
to enhance detection and analysis
Provide
security hardening recommendations
to product and engineering teams
Work closely with
Engineering and Product teams
to communicate findings and risk impact
Drive the initiative end to end in a
hands on capacity
Core Technical Skills
Strong experience in
Application Security / Penetration Testing / Red Team exposure
Expertise in
manual testing (not just automated tools)
Experience in:
Business logic vulnerabilities
API security
Complex/chained attack scenarios
Good understanding of
attack techniques and adversary behavior (MITRE Telecommunication CK preferred)