Senior Penetration Tester
Senior penetration tester leads end-to-end security assessments for industrial software, APIs, and OT systems, delivering risk-based findings and remediation guidance.
- Compensation
- Not disclosed
- Location
- Bangalore, India
- Work setup
- Hybrid
- Seniority
- Senior
- Employment
- Full time
- Experience
- 5+ years
- Category
- Security
- Posted
Skills
Nice to have
- One or more relevant certifications (e.g. CEH, OSCP, GWAPT, or HTB)
- Penetration testing of Web Applications, Web APIs, and Industrial software targets
- Experience testing API protocols such as REST, gRPC, GraphQL, WebSocket
- Established application security community presence (e.g. blog, presentations, attributed CVE’s)
- Experience using penetration testing tools such as Burp Suite Pro, SQLMap, SysInternals.
Full description
AVEVA is creating software trusted by over 90% of leading industrial companies.Position: R&D Senior Member of Technical Staff - Product Security - Penetration Testing
Qualifications: Experience executing penetration tests independently
Location:
Preferred: Bangalore, India with hybrid ~40% office, ~60% remote.
Available alternatives: Hyderabad, Mumbai, or fully remote.
Employment type: Regular, full-time, hybrid work arrangement
The Job
We are seeking a skilled and self-directed Senior Penetration Tester with 5+ years of experience to join AVEVA’s Product Security team. The ideal candidate is a technically well-rounded professional who can independently lead and execute penetration tests from scoping through final report delivery, with minimal oversight. This role demands breadth across attack surfaces including Web, APIs, OT, Mobile, as well as the depth to uncover complex vulnerabilities in both modern and legacy technology stacks.
Key responsibilities
- Use a risk-based approach to rapidly identify the highest impact issues
- Articulate technical and business risk of discovered issues
- Coordinate security assessments with external service providers
- Contribute to development of testing methodology, playbooks, and tooling
Essential requirements
- Ability to plan, scope and independently execute end-to-end penetration tests
- Experience producing high-quality reports with reproducible evidence and proof-of-concepts
- Experience working directly with product teams during test and retest phases
- Ability to provide actionable remediation and mitigation guidance aligned with industry practices
- Frontier knowledge in state-of-the-art penetration testing techniques relevant to the evolving threat landscape
Desired skills and competencies
- One or more relevant certifications (e.g. CEH, OSCP, GWAPT, or HTB)
- Penetration testing of Web Applications, Web APIs, and Industrial software targets
- Experience testing API protocols such as REST, gRPC, GraphQL, WebSocket
- Established application security community presence (e.g. blog, presentations, attributed CVE’s)
- Experience using penetration testing tools such as Burp Suite Pro, SQLMap, SysInternals.
R&D at AVEVA
Our global team of 2000+ developers work on an incredibly diverse portfolio of over 75 industrial automation and engineering products, which cover everything from data management to 3D design. AI and cloud are at the centre of our strategy, and we have over 150 patents to our name.