Sr. Engineer – Pen Tester
Target Corporation (company site, opens in a new tab)4+ yrsBengaluruOn-siteDirect career pageEst. 14–28 LPA
Posted 12h ago
Your match
Against your primary resume
Log in to see your match score
Create a free account or log in to unlock your CV match score across:
- Role fit
- Experience
- Industry relevance
Reach people at Target Corporation
People at this company you can reach
Log in to see who works here
Create a free account or log in to see the people at Target Corporation you could write to:
- Recruiters & HR
- People in this function
- Work addresses
Protocol Intelligence
How competitive this role is
Competition
Background fit
Strictness
Log in to see why each signal reads the way it does.
Job description
Structured overview of role & requirements
About This Role
- Lead and perform comprehensive application-layer and network-layer penetration tests to identify and validate security vulnerabilities across cloud infrastructure and applications.
- Prioritize, communicate, and ensure remediation of vulnerabilities including validating fixes through re-testing and post-remediation assessments.
- Collaborate with external security firms and manage assessments to maintain compliance with regulatory frameworks like PCI DSS and SOC.
Minimum Requirements
- Minimum 4+ years hands-on penetration testing, ethical hacking, or application security engineering experience.
- Proficient with penetration testing tools such as BurpSuite Enterprise, SAST, DAST, and IAST and scripting/programming (Python, Go, Ruby, or Bash).
- Strong knowledge of web-based attacks (SQLi, XSS, CSRF, XXE) and network security concepts including TCP/IP, DNS, HTTP/S, TLS, and IPSEC.
- Relevant security certifications such as OSCP, CEH, OSWE, or CISSP required.
Ideal Candidate Profile
- Experienced in both application and network penetration testing with ability to perform manual and automated assessments.
- Capable of independently managing security assessments and communicating technical details effectively to diverse audiences.
- Familiarity with compliance and regulatory requirements like PCI DSS and SOC, and working with external security partners for testing and threat hunting.