N #2029
Applications open
Full-Time Job
Application Security Penetration Tester
Persistent
About the role
About Position: We are seeking an experienced Application Security Penetration Tester to perform comprehensive security assessments of web applications, APIs, and enterprise applications. The ideal candidate will possess strong expertise in identifying, validating, and reporting security vulnerabilities through both manual and automated testing approaches. In this role, you will work closely with development, DevSecOps, and security teams to strengthen application security, validate remediations, and ensure adherence to industry security standards and best practices. Role: Application Security Penetration Tester Location: Pune Experience: Between 5 to 8 Years Job Type: Full Time Employment What You'll Do: Conduct end-to-end Web Application and API Penetration Testing engagements. Identify and validate security vulnerabilities based on OWASP Top 10, OWASP API Security Top 10, Secure Coding Best Practices. Perform both automated and manual security assessments. Test applications for Authentication vulnerabilities, Authorization flaws, Injection attacks, Broken Access Control, Security Misconfigurations, Sensitive Data Exposure, Session Management Weaknesses, API Security Risks. Perform vulnerability validation and eliminate false positives. Conduct remediation verification and retesting activities. Prepare detailed penetration testing reports with Vulnerability descriptions, Severity ratings, Proof of Concept (PoC), Business Impact, Risk Classification, Remediation Recommendations. Collaborate with development teams to explain findings and recommend fixes. Support secure software development lifecycle (SSDLC) activities. Assist in risk assessment and security review activities. Contribute to improving application security standards and practices. Expertise You'll Bring: Bachelor's or Master's degree in Computer Science, Artificial Intelligence, Machine Learning, Data Science, Engineering, or a related discipline. 5-8 years of experience in AI/ML engineering, solution architecture, or advanced software engineering. Strong expertise in Generative AI, Agentic AI, and autonomous AI agents. Deep understanding of Large Language Models (LLMs) and enterprise AI applications. Hands-on experience designing and deploying AI-powered applications. Strong proficiency in Python 3.x and AI application development. Experience with frameworks such as LangChain, LangGraph, Semantic Kernel, CrewAI, AutoGen, LlamaIndex. Expertise in Retrieval-Augmented Generation (RAG) architectures. Experience integrating vector databases and knowledge retrieval systems. Strong understanding of AI orchestration, prompting strategies, and agent workflows. Experience designing scalable and secure AI architectures. Familiarity with machine learning pipelines and model lifecycle management. Strong analytical, architectural, and problem-solving skills. Excellent communication and stakeholder management capabilities. Experience working in Agile delivery environments. Benefits: Competitive salary and benefits package Culture focused on talent development with quarterly growth opportunities and company-sponsored higher education and certifications Opportunity to work with cutting-edge technologies Employee engagement initiatives such as project parties, flexible work hours, and Long Service awards Annual health check-ups Insurance coverage: group term life, personal accident, and Mediclaim hospitalization for self, spouse, two children, and parents Values-Driven, People-Centric & Inclusive Work Environment: Persistent is dedicated to fostering diversity and inclusion in the workplace. We invite applications from all qualified individuals, including those with disabilities, and regardless of gender or gender preference. We welcome diverse candidates from all backgrounds. We support hybrid work and flexible hours to fit diverse lifestyles. Our office is accessibility-friendly, with ergonomic setups and assistive technologies to support employees with physical disabilities. If you are a person with disabilities and have specific requirements, please inform us during the application process or at any time during your employment. Let's unleash your full potential at Persistent - persistent.com/careers "Persistent is an Equal Opportunity Employer and prohibits discrimination and harassment of any kind."
Eligibility & process
Who can apply
Experience: 5-8 Yrs. Open to matching qualifications.
Skills & stack
Selection process
- Online Assessment / Technical Interview Rounds / HR Review
Prep kit
20 resourcesStudy material 4
Aptitude Practice Questions & Mock Tests
Curated logical, quantitative, and verbal reasoning problems for the initial online screening round.
Company-Specific Interview Preparation Corner
Detailed interview experiences, exam formats, and previous test questions for Persistent and tech roles.
Technical Placement Cheat Sheets & Question Bank
High-yield coding cheat sheets, core CS fundamentals (OOP, DBMS, OS, Networks), and rapid revision guides.
Algorithm, DSA & Live Code Debugger Practice
Hands-on problem sets to improve coding speed and step-by-step memory debugging.
Company-specific guides 4
APTITUDE & LOGIC
Aptitude Practice Questions & Online Mock Tests
Curated logical, quantitative, and verbal reasoning problems to sharpen reasoning skills required for the initial screening test.
COMPANY GUIDE
Persistent Interview Preparation Corner
Comprehensive guide covering typical interview formats, common questions, and preparation tips for Persistent and off-campus tech roles.
MOCK TESTS & PAPERS
Comprehensive Interview Prep Resources & Syllabus
Collection of previous year questions, company-specific test patterns, and interview experiences for technical and HR rounds.
CODING PRACTICE
Algorithm and Data Structure Problem Set
Practice problems to improve coding proficiency and algorithm problem-solving speed for technical rounds.
Likely coding questions 4
Round-wise strategy 4
Round 1: Online Assessment (OA)
Aptitude, Quantitative Logic & 2 Coding Problems
Focus on accuracy and speed. Practice arrays, strings, and standard arithmetic puzzles.
Round 2: Technical Interview 1
Core Tech Stack (Software testing, Application security testing, Application security, Security, Web technologies, Web application, Application, API) & Live Code Tracing
Explain your thought process aloud. Analyze time & space complexities before coding.
Round 3: System Design & Problem Solving
Database Schemas, APIs & Architecture Basics
Clarify edge cases, diagram schemas cleanly, and discuss scalability trade-offs.
Round 4: HR & Cultural Fit Discussion
Persistent Core Values, Learning Agility & Offer Terms
Demonstrate passion, strong communication, and readiness for full-time collaboration.
Technical questions 5
What is the difference between Implicit Wait, Explicit Wait, and Fluent Wait in Selenium? Answer
Model answer: Implicit Wait sets a global timeout for all element lookups. Explicit Wait pauses execution until a specific ExpectedCondition (e.g. elementToBeClickable) is met. Fluent Wait allows defining polling frequency and ignoring specific exceptions like NoSuchElementException.
Explain the Page Object Model (POM) and its advantages in Test Automation. Answer
Model answer: POM is a design pattern that creates an object repository for web UI elements. It separates test scripts from page locators, reducing code duplication and making maintenance easy when UI elements change.
How do you handle dynamic WebElements whose ID changes on page reload? Answer
Model answer: Use dynamic XPath methods like contains(), starts-with(), text(), or XPath axes (ancestor, following-sibling, parent) instead of brittle absolute paths.
What is the difference between @BeforeMethod and @BeforeClass in TestNG? Answer
Model answer: @BeforeClass runs once before the first test method in the current class, while @BeforeMethod executes before each individual test method.
How do you validate REST API response codes and JSON payload using Postman / RestAssured? Answer
Model answer: In RestAssured: given().when().get('/endpoint').then().assertThat().statusCode(200).body('status', equalTo('ACTIVE')).
Behavioural & HR questions 3
Why do you want to join Persistent as a Application Security Penetration Tester?
Highlight Persistent's market reputation, recent tech innovations, and how your skills in Software testing directly solve their team's objectives.
Highlight Persistent's market reputation, recent tech innovations, and how your skills in Software testing directly solve their team's objectives.
Describe a challenging bug or academic project roadblock and how you resolved it.
Use the STAR method: Situation (project context), Task (what needed solving), Action (specific tools/logic applied), Result (quantifiable positive outcome).
Use the STAR method: Situation (project context), Task (what needed solving), Action (specific tools/logic applied), Result (quantifiable positive outcome).
How do you handle strict deadlines or sudden scope changes?
Explain your prioritization strategy, proactive communication with mentors/peers, and agile mindset.
Explain your prioritization strategy, proactive communication with mentors/peers, and agile mindset.