Application Security & Infra VAPT – Penetration Tester
- Work mode
- On-site
- Employment type
- Full-time
About the job
Experience: 2-4 Years
Department: Cybersecurity – Security Testing Experience: 2+ Years Location: Andheri / Dombivli Employment Type: Full-Time Joining Preference: Immediate Joiners Preferred About the Role Talakunchi Networks Pvt. Ltd. is looking for experienced and technically skilled Penetration Testers / Security Analysts to join our Security Testing team. The role involves hands-on security assessments across Application Security, Web/API/Mobile Security Testing, Secure Code Review and Infrastructure VAPT . Candidates will work on real-world security engagements, vulnerability identification, remediation validation, client interactions and compliance-driven security assessments, particularly within BFSI and payment environments . Key Responsibilities
• Perform Application Security Testing and Infrastructure VAPT based on defined methodologies and industry standards.
- Perform Application Security Testing and Infrastructure VAPT based on defined methodologies and industry standards.
- Conduct Web, API and Mobile Application Security Testing.
- Perform infrastructure VAPT across servers, networks, firewalls, endpoints and related components.
- Identify, validate and assess security vulnerabilities and misconfigurations.
- Analyze authentication, authorization, access control, session management, business logic and API security.
- Conduct Secure Code Review (SCR) and identify insecure coding practices where applicable.
- Perform vulnerability retesting and remediation validation.
- Prepare detailed security assessment and VAPT reports with evidence, impact, risk ratings and remediation recommendations.
- Work closely with development, infrastructure, application and customer teams to address security findings.
- Support security assessments for BFSI, banking, UPI and payment applications .
- Support PCI-DSS and other security compliance assessments .
- Participate in client discussions, technical walkthroughs and security review meetings.
- Maintain assessment documentation and ensure timely completion of assigned deliverables.
• 2+ years of hands-on experience in Application Security / AppSec / VAPT .
- 2+ years of hands-on experience in Application Security / AppSec / VAPT .
- Strong understanding of OWASP Top 10 and application security fundamentals.
- Hands-on experience in Web and API Security Testing .
- Exposure to Mobile Application Security Testing is preferred.
- Understanding of JWT, OAuth, authentication, authorization and business logic vulnerabilities .
- Hands-on experience with tools such as Burp Suite, Postman and OWASP ZAP .
- Experience with MobSF, Frida or Objection is an advantage.
- Basic understanding of programming languages such as Java, Python, .NET or equivalent .
- Secure Code Review experience is an advantage.
• 2+ years of hands-on experience in Infrastructure VAPT / Penetration Testing . • Strong understanding of TCP/IP, DNS, routing, switching and firewalls . • Experience assessing servers, networks, endpoints and infrastructure components. • Knowledge of common infrastructure vulnerabilities, misconfigurations and attack vectors. • Hands-on experience with tools such as Nmap, Nessus, Wireshark or similar . • Ability to validate vulnerabilities and provide practical remediation recommendations. • Strong report writing and technical documentation skills. BFSI & Compliance Exposure Experience in any of the following will be preferred:
• Banking / BFSI environments
- Banking / BFSI environments
- UPI and payment applications
- PCI-DSS assessments
- Security compliance audits
- Client-facing security assessment engagements
• Coordinate with junior security testers and support task allocation where required.
- Coordinate with junior security testers and support task allocation where required.
- Review vulnerability findings and security reports for technical accuracy.
- Mentor junior team members on security testing methodologies and vulnerability validation.
- Coordinate with developers, infrastructure teams, application owners and client stakeholders.
- Track remediation, retesting and closure of identified vulnerabilities.
- Participate in client meetings and explain technical findings and remediation requirements.
• CEH • eWPT / eMAPT • OSCP / OSWE • CREST or equivalent • CCNA for Infrastructure VAPT profiles Practical hands-on experience will be preferred over certification alone. Qualification
• Bachelor's degree in Computer Science, Information Technology, Cybersecurity or an equivalent field.
- Bachelor's degree in Computer Science, Information Technology, Cybersecurity or an equivalent field.
- 2+ years of relevant cybersecurity experience.
- Immediate joiners are preferred.
- Candidates serving a notice period may also be considered based on the requirement.
- Strong analytical and problem-solving skills.
- Excellent technical documentation and communication skills.
- Ability to work in a structured, client-facing and compliance-driven environment.
- Willingness to travel to customer locations as required.
- Candidates must upload their educational and relevant qualification documents under Additional Documents in HRMS.
- Candidates should be comfortable working from the Andheri/Dombivli office and customer locations as required.
From Talakunchi Networks's careers page (Keka), checked 29 Oct 2026.
How to apply
- Select Apply on talakunchi.com. It opens Talakunchi Networks's own application form in a new tab, run on Keka.
- Fill in the form and upload your résumé there. Jobiwork never sees your application.
- Talakunchi Networks will reply to you directly. No real employer asks you for money to apply.
Posted 19 Oct 2026 · checked 29 Oct 2026 · Report this job