KASHII UPDATEZ Everyday Student Requirements & Python Coding Tutorials by Python Kashi
N #2029
Applications open Full-Time Job

Application Security Penetration Tester

Persistent

  • Pune, India
  • Competitive Package (Best in Industry)
  • 5-8 Yrs
  • Posted Today
HR
Recruiter contact
Recruiter / hiring contact
No public email in this post. Use a source-linked contact instead.

About the role

About Position: We are seeking an experienced Application Security Penetration Tester to perform comprehensive security assessments of web applications, APIs, and enterprise applications. The ideal candidate will possess strong expertise in identifying, validating, and reporting security vulnerabilities through both manual and automated testing approaches. In this role, you will work closely with development, DevSecOps, and security teams to strengthen application security, validate remediations, and ensure adherence to industry security standards and best practices. Role: Application Security Penetration Tester Location: Pune Experience: Between 5 to 8 Years Job Type: Full Time Employment What You'll Do: Conduct end-to-end Web Application and API Penetration Testing engagements. Identify and validate security vulnerabilities based on OWASP Top 10, OWASP API Security Top 10, Secure Coding Best Practices. Perform both automated and manual security assessments. Test applications for Authentication vulnerabilities, Authorization flaws, Injection attacks, Broken Access Control, Security Misconfigurations, Sensitive Data Exposure, Session Management Weaknesses, API Security Risks. Perform vulnerability validation and eliminate false positives. Conduct remediation verification and retesting activities. Prepare detailed penetration testing reports with Vulnerability descriptions, Severity ratings, Proof of Concept (PoC), Business Impact, Risk Classification, Remediation Recommendations. Collaborate with development teams to explain findings and recommend fixes. Support secure software development lifecycle (SSDLC) activities. Assist in risk assessment and security review activities. Contribute to improving application security standards and practices. Expertise You'll Bring: Bachelor's or Master's degree in Computer Science, Artificial Intelligence, Machine Learning, Data Science, Engineering, or a related discipline. 5-8 years of experience in AI/ML engineering, solution architecture, or advanced software engineering. Strong expertise in Generative AI, Agentic AI, and autonomous AI agents. Deep understanding of Large Language Models (LLMs) and enterprise AI applications. Hands-on experience designing and deploying AI-powered applications. Strong proficiency in Python 3.x and AI application development. Experience with frameworks such as LangChain, LangGraph, Semantic Kernel, CrewAI, AutoGen, LlamaIndex. Expertise in Retrieval-Augmented Generation (RAG) architectures. Experience integrating vector databases and knowledge retrieval systems. Strong understanding of AI orchestration, prompting strategies, and agent workflows. Experience designing scalable and secure AI architectures. Familiarity with machine learning pipelines and model lifecycle management. Strong analytical, architectural, and problem-solving skills. Excellent communication and stakeholder management capabilities. Experience working in Agile delivery environments. Benefits: Competitive salary and benefits package Culture focused on talent development with quarterly growth opportunities and company-sponsored higher education and certifications Opportunity to work with cutting-edge technologies Employee engagement initiatives such as project parties, flexible work hours, and Long Service awards Annual health check-ups Insurance coverage: group term life, personal accident, and Mediclaim hospitalization for self, spouse, two children, and parents Values-Driven, People-Centric & Inclusive Work Environment: Persistent is dedicated to fostering diversity and inclusion in the workplace. We invite applications from all qualified individuals, including those with disabilities, and regardless of gender or gender preference. We welcome diverse candidates from all backgrounds. We support hybrid work and flexible hours to fit diverse lifestyles. Our office is accessibility-friendly, with ergonomic setups and assistive technologies to support employees with physical disabilities. If you are a person with disabilities and have specific requirements, please inform us during the application process or at any time during your employment. Let's unleash your full potential at Persistent - persistent.com/careers "Persistent is an Equal Opportunity Employer and prohibits discrimination and harassment of any kind."

Eligibility & process

Who can apply

Experience: 5-8 Yrs. Open to matching qualifications.

Skills & stack

Software testing Application security testing Application security Security Web technologies Web application Application API

Selection process

  1. Online Assessment / Technical Interview Rounds / HR Review

Prep kit

20 resources
Study material 4
Company-specific guides 4
Likely coding questions 4
Round-wise strategy 4
Round 1: Online Assessment (OA) Aptitude, Quantitative Logic & 2 Coding Problems Focus on accuracy and speed. Practice arrays, strings, and standard arithmetic puzzles.
Round 2: Technical Interview 1 Core Tech Stack (Software testing, Application security testing, Application security, Security, Web technologies, Web application, Application, API) & Live Code Tracing Explain your thought process aloud. Analyze time & space complexities before coding.
Round 3: System Design & Problem Solving Database Schemas, APIs & Architecture Basics Clarify edge cases, diagram schemas cleanly, and discuss scalability trade-offs.
Round 4: HR & Cultural Fit Discussion Persistent Core Values, Learning Agility & Offer Terms Demonstrate passion, strong communication, and readiness for full-time collaboration.
Technical questions 5
What is the difference between Implicit Wait, Explicit Wait, and Fluent Wait in Selenium? Answer
Model answer: Implicit Wait sets a global timeout for all element lookups. Explicit Wait pauses execution until a specific ExpectedCondition (e.g. elementToBeClickable) is met. Fluent Wait allows defining polling frequency and ignoring specific exceptions like NoSuchElementException.
Explain the Page Object Model (POM) and its advantages in Test Automation. Answer
Model answer: POM is a design pattern that creates an object repository for web UI elements. It separates test scripts from page locators, reducing code duplication and making maintenance easy when UI elements change.
How do you handle dynamic WebElements whose ID changes on page reload? Answer
Model answer: Use dynamic XPath methods like contains(), starts-with(), text(), or XPath axes (ancestor, following-sibling, parent) instead of brittle absolute paths.
What is the difference between @BeforeMethod and @BeforeClass in TestNG? Answer
Model answer: @BeforeClass runs once before the first test method in the current class, while @BeforeMethod executes before each individual test method.
How do you validate REST API response codes and JSON payload using Postman / RestAssured? Answer
Model answer: In RestAssured: given().when().get('/endpoint').then().assertThat().statusCode(200).body('status', equalTo('ACTIVE')).
Behavioural & HR questions 3
Why do you want to join Persistent as a Application Security Penetration Tester?
Highlight Persistent's market reputation, recent tech innovations, and how your skills in Software testing directly solve their team's objectives.
Describe a challenging bug or academic project roadblock and how you resolved it.
Use the STAR method: Situation (project context), Task (what needed solving), Action (specific tools/logic applied), Result (quantifiable positive outcome).
How do you handle strict deadlines or sudden scope changes?
Explain your prioritization strategy, proactive communication with mentors/peers, and agile mindset.
Persistent Competitive Package (Best in Industry)
Recruiter Resume Apply
Chat Chat with Kashii