workday
Senior Penetration Tester
AVEVA
Bengaluru, IND
Full-time
Senior · 5+ years experience
Hybrid
Discovered 3 weeks ago
graphqlgrpc
Key Skills for This Role
graphqlgrpc
Full Job Posting
Location:
- Preferred: Bangalore, India with hybrid ~40% office, ~60% remote.
- Available alternatives: Hyderabad, Mumbai, or fully remote.
- Employment type: Regular, full-time, hybrid work arrangement
- The Job
- We are seeking a skilled and self-directed Senior Penetration Tester with 5+ years of experience to join AVEVA’s Product Security team. The ideal candidate is a technically well-rounded professional who can independently lead and execute penetration tests from scoping through final report delivery, with minimal oversight. This role demands breadth across attack surfaces including Web, APIs, OT, Mobile, as well as the depth to uncover complex vulnerabilities in both modern and legacy technology stacks.
Key responsibilities
- Use a risk-based approach to rapidly identify the highest impact issues
- Articulate technical and business risk of discovered issues
- Coordinate security assessments with external service providers
- Contribute to development of testing methodology, playbooks, and tooling
- Essential requirements
- Ability to plan, scope and independently execute end-to-end penetration tests
- Experience producing high-quality reports with reproducible evidence and proof-of-concepts
- Experience working directly with product teams during test and retest phases
- Ability to provide actionable remediation and mitigation guidance aligned with industry practices
- Frontier knowledge in state-of-the-art penetration testing techniques relevant to the evolving threat landscape
- Desired skills and competencies
- One or more relevant certifications (e.g. CEH, OSCP, GWAPT, or HTB)
- Penetration testing of Web Applications, Web APIs, and Industrial software targets
- Experience testing API protocols such as REST, gRPC, GraphQL, WebSocket
- Established application security community presence (e.g. blog, presentations, attributed CVE’s)
- Experience using penetration testing tools such as Burp Suite Pro, SQLMap, SysInternals.
- R&D at AVEVA
- Our global team of 2000+ developers work on an incredibly diverse portfolio of over 75 industrial automation and engineering products, which cover everything from data management to 3D design. AI and cloud are at the centre of our strategy, and we have over 150 patents to our name.
- Our track record of innovation is no fluke – it’s the result of a structured and deliberate focus on learning, collaboration and inclusivity. If you want to build applications that solve big problems and do impactful work, join us!
- India Benefits include:
- Gratuity, Medical and accidental insurance, very attractive leave entitlement, emergency leave days, childcare support, maternity, paternity and adoption leaves, education assistance program, home office set up support (for hybrid roles), well-being support
- It’s possible we’re hiring for this position in multiple countries, in which case the above benefits apply to the primary location. Specific benefits vary by country, but our packages are similarly comprehensive.
- Find out more: aveva.com/en/about/careers/benefits/
- Hybrid working
- We work in a hybrid way at AVEVA. Most roles are based at a local AVEVA office, with an expectation of being on-site 50% of your working hours to support collaboration and connection. Some positions are fully office-based depending on the nature of the work, and certain roles that support specific customers or markets may be remote. The working arrangement for this position will be confirmed during the hiring process.
- Hiring process
- Interested? Great! Get started by submitting your cover letter and CV through our application portal. AVEVA is committed to recruiting and retaining people with disabilities. Please let us know in advance if you need reasonable support during your application process.
- Find out more: aveva.com/en/about/careers/hiring-process
- About AVEVA
- AVEVA is a global leader in industrial software with more than 6,500 employees in over 40 countries. Our cutting-edge solutions are used by thousands of enterprises to deliver the essentials of life – such as energy, infrastructure, chemicals, and minerals – safely, efficiently, and more sustainably.
- We are committed to embedding sustainability and inclusion into our operations, our culture, and our core business strategy. Learn more about how we are progressing against our ambitious 2030 targets: sustainability-report.aveva.com/
- Find out more: aveva.com/en/about/careers/
- AVEVA requires all successful applicants to undergo and pass a drug screening and comprehensive background check before they start employment. Background checks will be conducted in accordance with local laws and may, subject to those laws, include proof of educational attainment, employment history verification, proof of work authorization, criminal records, identity verification, credit check. Certain positions dealing with sensitive and/or third-party personal data may involve additional background check criteria.
- AVEVA is an Equal Opportunity Employer. We are committed to being an exemplary employer with an inclusive culture, developing a workplace environment where all our employees are treated with dignity and respect. We value diversity and the expertise that people from different backgrounds bring to our business. AVEVA provides reasonable accommodation to applicants with disabilities where appropriate. If you need reasonable accommodation for any part of the application and hiring process, please notify your recruiter. Determinations on requests for reasonable accommodation will be made on a case-by-case basis.
Qualifications
- Experience executing penetration tests independently
- Preferred: Bangalore, India with hybrid ~40% office, ~60% remote.
- Available alternatives: Hyderabad, Mumbai, or fully remote.
- Employment type: Regular, full-time, hybrid work arrangement
- The Job
- We are seeking a skilled and self-directed Senior Penetration Tester with 5+ years of experience to join AVEVA’s Product Security team. The ideal candidate is a technically well-rounded professional who can independently lead and execute penetration tests from scoping through final report delivery, with minimal oversight. This role demands breadth across attack surfaces including Web, APIs, OT, Mobile, as well as the depth to uncover complex vulnerabilities in both modern and legacy technology stacks.
- Key responsibilities
- Use a risk-based approach to rapidly identify the highest impact issues
- Articulate technical and business risk of discovered issues
- Coordinate security assessments with external service providers
- Contribute to development of testing methodology, playbooks, and tooling
- Ability to plan, scope and independently execute end-to-end penetration tests
- Experience producing high-quality reports with reproducible evidence and proof-of-concepts
- Experience working directly with product teams during test and retest phases
- Ability to provide actionable remediation and mitigation guidance aligned with industry practices
- Frontier knowledge in state-of-the-art penetration testing techniques relevant to the evolving threat landscape
- Desired skills and competencies
- One or more relevant certifications (e.g. CEH, OSCP, GWAPT, or HTB)
- Penetration testing of Web Applications, Web APIs, and Industrial software targets
- Experience testing API protocols such as REST, gRPC, GraphQL, WebSocket
- Established application security community presence (e.g. blog, presentations, attributed CVE’s)
- Experience using penetration testing tools such as Burp Suite Pro, SQLMap, SysInternals.
- R&D at AVEVA
- Our global team of 2000+ developers work on an incredibly diverse portfolio of over 75 industrial automation and engineering products, which cover everything from data management to 3D design. AI and cloud are at the centre of our strategy, and we have over 150 patents to our name.
- Our track record of innovation is no fluke – it’s the result of a structured and deliberate focus on learning, collaboration and inclusivity. If you want to build applications that solve big problems and do impactful work, join us!
- Gratuity, Medical and accidental insurance, very attractive leave entitlement, emergency leave days, childcare support, maternity, paternity and adoption leaves, education assistance program, home office set up support (for hybrid roles), well-being support
- It’s possible we’re hiring for this position in multiple countries, in which case the above benefits apply to the primary location. Specific benefits vary by country, but our packages are similarly comprehensive.
- Find out more: aveva.com/en/about/careers/benefits/
- Hybrid working
- We work in a hybrid way at AVEVA. Most roles are based at a local AVEVA office, with an expectation of being on-site 50% of your working hours to support collaboration and connection. Some positions are fully office-based depending on the nature of the work, and certain roles that support specific customers or markets may be remote. The working arrangement for this position will be confirmed during the hiring process.
- Hiring process
- Interested? Great! Get started by submitting your cover letter and CV through our application portal. AVEVA is committed to recruiting and retaining people with disabilities. Please let us know in advance if you need reasonable support during your application process.
- Find out more: aveva.com/en/about/careers/hiring-process
- About AVEVA
- AVEVA is a global leader in industrial software with more than 6,500 employees in over 40 countries. Our cutting-edge solutions are used by thousands of enterprises to deliver the essentials of life – such as energy, infrastructure, chemicals, and minerals – safely, efficiently, and more sustainably.
- We are committed to embedding sustainability and inclusion into our operations, our culture, and our core business strategy. Learn more about how we are progressing against our ambitious 2030 targets: sustainability-report.aveva.com/
- Find out more: aveva.com/en/about/careers/
- AVEVA requires all successful applicants to undergo and pass a drug screening and comprehensive background check before they start employment. Background checks will be conducted in accordance with local laws and may, subject to those laws, include proof of educational attainment, employment history verification, proof of work authorization, criminal records, identity verification, credit check. Certain positions dealing with sensitive and/or third-party personal data may involve additional background check criteria.
- AVEVA is an Equal Opportunity Employer. We are committed to being an exemplary employer with an inclusive culture, developing a workplace environment where all our employees are treated with dignity and respect. We value diversity and the expertise that people from different backgrounds bring to our business. AVEVA provides reasonable accommodation to applicants with disabilities where appropriate. If you need reasonable accommodation for any part of the application and hiring process, please notify your recruiter. Determinations on requests for reasonable accommodation will be made on a case-by-case basis.
About AVEVA
Software & SaaS6500 employeesFounded 1967
Global leader in industrial software and digital transformation solutions.
Visit company websiteJobs and hiring trendsApply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at AVEVA
Principal Solution Architect (PI Data Infrastructure / AVEVA CONNECT Digital Twin)
Cambridge, GBR
SeniorFull-time
AVEVA is seeking a Principal Solution Architect to lead customer architecture and delivery for PI Data Infrastructure and CONNECT Digital Twin initiatives. Candidates need 15+ years of relevant experience, deep PI Data I
Discovered TodayView →
R&D Senior Member of Technical Staff, Cloud Operations & Infrastructure
Bengaluru, IND
SeniorFull-time
Discovered 5 days agoView →
Principal Solution Architect (PI Data Infrastructure / AVEVA CONNECT Digital Twin)
Cambridge, GBR
Discovered TodayFull-time
R&D Senior Member of Technical Staff
Hyderabad, IND
Discovered 2 days agoFull-time
Project Engineer
Delhi, IND
Discovered 3 days agoFull-time
Services Support Engineer
Delhi, IND
Discovered 3 days agoFull-time
Commercial Graduate (Customer Experience) - US
Houston, USA
Discovered 4 days agoFull-time
Power Engineer
Irvine, USA
Discovered 4 days agoFull-time
R&D Senior Member of Technical Staff, Cloud Operations & Infrastructure
Bengaluru, IND
Discovered 5 days agoFull-time
Product Security Software Engineer
Philadelphia, USA
Discovered 5 days agoFull-time