Application Security Penetration Tester

About this job

About Persistent

We are an AI-led, platform-driven Digital Engineering and Enterprise Modernization partner, combining deep technical expertise and industry experience to help our clients anticipate what's next. Our offerings and proven solutions create a unique competitive advantage for our clients by giving them the power to see beyond and rise above. We work with many industry-leading organizations across the world, including 20 Fortune 50 companies and 4 of the 5 top banks in both the US and India, and numerous innovators across the healthcare ecosystem.

Our disruptor's mindset, commitment to client success, and agility to thrive in the dynamic environment have enabled us to sustain our growth momentum. Persistent has been recognized across top industry platforms for innovation, leadership, and inclusion. We reported $1,654.4M FY26 revenue with 17.4% Y-o-Y growth. We have delivered 24 sequential quarters of growth with $436.0M in Q4 FY26 revenue, up 3.2% Q-o-Q and 16.2% Y-o-Y growth. Our 27,500+ global team members, located in 18 countries, have been instrumental in helping the market leaders transform their industries.

About Position

We are seeking an experienced Application Security Penetration Tester to perform comprehensive security assessments of web applications, APIs, and enterprise applications. The ideal candidate will possess strong expertise in identifying, validating, and reporting security vulnerabilities through both manual and automated testing approaches. In this role, you will work closely with development, DevSecOps, and security teams to strengthen application security, validate remediations, and ensure adherence to industry security standards and best practices.

• Role: Application Security Penetration Tester
• Location: Pune
• Experience: Between 5 to 8 Years
• Job Type: Full Time Employment

What You'll Do

• Conduct end-to-end Web Application and API Penetration Testing engagements.
• Identify and validate security vulnerabilities based on OWASP Top 10, OWASP API Security Top 10, Secure Coding Best Practices.
• Perform both automated and manual security assessments.
• Test applications for Authentication vulnerabilities, Authorization flaws, Injection attacks, Broken Access Control, Security Misconfigurations, Sensitive Data Exposure, Session Management Weaknesses, API Security Risks.
• Perform vulnerability validation and eliminate false positives.
• Conduct remediation verification and retesting activities.
• Prepare detailed penetration testing reports with Vulnerability descriptions, Severity ratings, Proof of Concept (PoC), Business Impact, Risk Classification, Remediation Recommendations.
• Collaborate with development teams to explain findings and recommend fixes.
• Support secure software development lifecycle (SSDLC) activities.
• Assist in risk assessment and security review activities.
• Contribute to improving application security standards and practices.

Expertise You'll Bring

• Bachelor's or Master's degree in Computer Science, Artificial Intelligence, Machine Learning, Data Science, Engineering, or a related discipline.
• 5-8 years of experience in AI/ML engineering, solution architecture, or advanced software engineering.
• Strong expertise in Generative AI, Agentic AI, and autonomous AI agents.
• Deep understanding of Large Language Models (LLMs) and enterprise AI applications.
• Hands-on experience designing and deploying AI-powered applications.
• Strong proficiency in Python 3.x and AI application development.
• Experience with frameworks such as LangChain, LangGraph, Semantic Kernel, CrewAI, AutoGen, LlamaIndex.
• Expertise in Retrieval-Augmented Generation (RAG) architectures.
• Experience integrating vector databases and knowledge retrieval systems.
• Strong understanding of AI orchestration, prompting strategies, and agent workflows.
• Experience designing scalable and secure AI…