Senior Web Application Penetration Tester Jobs

SIXGEN’s mission is to deliver agile, mission-ready cybersecurity solutions that empower government and critical infrastructure organizations to stay ahead of advanced cyber threats. We combine innovation, deep expertise, and cutting-edge capabilities to uncover vulnerabilities, protect vital systems, and ensure operational superiority in an ever-evolving digital landscape. POSITION OVERVIEW Position: Senior Web Application Penetration Tester Job Type: Full-time Location: Remote Clearance Requirements: Must be able to obtain a Secret Clearance Travel Requirements: Up to 10% Experience: 5+ years Salary :$125-$165K WHAT YOU'LL DO We are seeking a skilled and motivated Senior Web Application Penetration Tester to join our growing cyber operations team. The ideal candidate will possess deep expertise in web application security testing, vulnerability research, and exploitation techniques, with the ability to identify complex attack paths and develop creative solutions to challenging security problems. This role goes far beyond automated scanning. Successful candidates will conduct in-depth assessments of web applications, APIs, mobile applications, and supporting infrastructure while leveraging custom tooling, manual testing techniques, and advanced exploitation methodologies to uncover impactful security findings. KEY RESPONSIBILITIES Web Application Security Assessments Conduct penetration testing of web applications, APIs, mobile applications, databases, and client-side technologies. Perform application enumeration, endpoint discovery, vulnerability research, and exploitation activities. Identify, validate, and assess vulnerabilities across complex environments. Analyze attack paths and security weaknesses to determine business and operational impact. Technical Analysis & Research Develop and utilize custom tools, scripts, and payloads to support testing activities. Perform network mapping, vulnerability analysis, and security assessments across applicatio

Our Purpose Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential. Title and Summary Senior Vulnerability Analyst Overview Mastercard is seeking a Senior Vulnerability Analyst to manage the Bug Bounty Program and perform advanced application security testing across web, mobile, and API environments. This role is responsible for validating externally reported vulnerabilities, conducting penetration testing, partnering with engineering teams on remediation, and helping strengthen Mastercard's security posture through proactive security assessments and vulnerability management. Role • Manage the Bug Bounty Program, including vulnerability intake, validation, triage, and researcher engagement. • Conduct penetration testing of web, mobile, and API-based applications. • Assess risk, prioritize findings, and provide remediation guidance. • Partner with product and engineering teams to drive timely remediation and validate fixes. • Develop reporting and metrics to measure program effectiveness and communicate risk. All About You • At least 3 years of experience in application security and penetration testing • Strong knowledge of web, mobile, and API security, including OWASP Top 10 risks. • Hands-on experience with tools such as Burp Suite, OWASP ZAP, or similar testing platforms. • Ability to assess vulnerabilities, communicate risk, and provide actionable remediation gu

Junior Consultant – Vulnerability Assessment, Penetration Testing & Red Teaming Location: Clearwater Pune, WFO Experience: 1–3 years Employment Type: Full-time Department: Cybersecurity / Information Security Reporting To: Senior Consultant / Team Lead About the Role Clearwater is looking for a Junior Consultant – Vulnerability Assessment, Penetration Testing (VAPT) & Red Teaming to join our consulting services team. The role will support the delivery of vulnerability assessments, penetration testing, application and infrastructure security assessments, and red team engagements for clients across different technology environments. The ideal candidate should have a strong foundation in cybersecurity, networking, operating systems and common security testing methodologies, along with a willingness to continuously learn and develop offensive security skills. Key Responsibilities Vulnerability Assessment & Penetration Testing Assist in conducting vulnerability assessments and penetration tests across: Web applications and APIs Mobile applications Network and infrastructure environments Cloud environments Internal and external networks Wireless environments, where applicable Perform reconnaissance, enumeration, vulnerability identification and validation. Identify and safely validate security weaknesses using manual and automated techniques. Assist with exploitation and post-exploitation activities under approved engagement scopes. Conduct security testing in accordance with established methodologies such as OWASP, PTES and NIST, as applicable. Analyse scan results and distinguish genuine vulnerabilities from false positives. Red Teaming Support red team and adversary simulation engagements under the guidance of senior team members. Assist with reconnaissance, attack-path identification, initial access, privilege escalation, lateral movement and other approved activities. Develop an understanding of adversary tactics, techni

About Atari Atari is an interactive entertainment company and an iconic gaming industry brand recognized worldwide for its multi-platform games and licensed products. Atari owns and/or manages a portfolio of more than 400 games and franchises, including globally recognized brands such as Asteroids® , Centipede® , Missile Command® , Pong® , and RollerCoaster Tycoon® . The Atari family of brands includes Digital Eclipse, Nightdive Studios, Infogrames, AtariAge, MobyGames, as well as Hipster Whale, Coatsink, Early Morning Studios, and Stormteller Games—spanning game development, publishing, and community experiences worldwide. Atari operates internationally with offices in the US, UK, in France, Germany, Sweden, and India. Overview As a Senior Offensive Security Engineer, you will play a crucial role in evaluating and strengthening the security posture of the organization's IT infrastructure, applications, and networks. Your primary responsibilities will include identifying and addressing security vulnerabilities through detailed assessments and hands-on penetration testing. You will work closely with cross-functional teams to enhance security measures and safeguard systems against potential threats. What You’ll Do Conduct Vulnerability Assessments Perform detailed vulnerability assessments on internal and external systems, networks, and applications. Utilize automated tools and manual techniques to identify security weaknesses. Perform Penetration Testing Execute penetration tests on IT infrastructure, web applications, mobile platforms, and network components. Simulate cyber-attacks to evaluate the effectiveness of existing security measures. Security Operations & Hardening AI Security: Familiarity with AI-powered security tools and AI/ML security considerations for detection, analysis, and hardening. Security Baselining: Experience designing, implementing, and maintaining secure configuration baselines across cloud and on-premise environments. Configuration Revi

We believe communication belongs to everyone. We exist to democratize phone service. TextNow is evolving the way the world connects and that's because we're made up of people with curious minds who bring an optimistic, yet critical lens into the work we do. We're the largest provider of free phone service in the nation. And we're just getting started. Join us in our mission to break down barriers to communication and free the flow of conversation for people everywhere. TextNow is looking for an experienced Senior Web Developer to play a key role in the development of our voice and messaging platform on Web. You will be responsible for building high-performance, scalable, and feature-rich mobile applications that integrate voice, video, and messaging capabilities. You will work alongside a talented team of developers, product managers, and UX/UI designers to create intuitive and user-centric experiences. What You'll Do Design, develop, and maintain a high-quality Web application focused on voice and messaging features (voice calling, chat, real-time notifications, etc.). Write clean, maintainable and testable Web applications in Javascript using the latest programming techniques and frameworks Collaborate with cross-functional teams to define, design, and ship new features. Work with real-time communication protocols, such as WebRTC, SIP, and related messaging and voice frameworks. Optimize app performance to ensure smooth voice and messaging functionality, including audio quality, latency, and bandwidth usage. Troubleshoot and debug issues related to performance, crashes, and other bugs, ensuring a smooth and stable user experience. Own problems and solutions end-to-end, from ideation to deployment Experimentation is a key part of your workflow; be data-driven and make the right decisions for our customers Dep

We believe communication belongs to everyone. We exist to democratize phone service. TextNow is evolving the way the world connects and that's because we're made up of people with curious minds who bring an optimistic, yet critical lens into the work we do. We're the largest provider of free phone service in the nation. And we're just getting started. Join us in our mission to break down barriers to communication and free the flow of conversation for people everywhere. TextNow is looking for an experienced Senior Web Developer to play a key role in the development of our voice and messaging platform on Web. You will be responsible for building high-performance, scalable, and feature-rich mobile applications that integrate voice, video, and messaging capabilities. You will work alongside a talented team of developers, product managers, and UX/UI designers to create intuitive and user-centric experiences. What You'll Do Design, develop, and maintain a high-quality Web application focused on voice and messaging features (voice calling, chat, real-time notifications, etc.). Write clean, maintainable and testable Web applications in Javascript using the latest programming techniques and frameworks Collaborate with cross-functional teams to define, design, and ship new features. Work with real-time communication protocols, such as WebRTC, SIP, and related messaging and voice frameworks. Optimize app performance to ensure smooth voice and messaging functionality, including audio quality, latency, and bandwidth usage. Troubleshoot and debug issues related to performance, crashes, and other bugs, ensuring a smooth and stable user experience. Own problems and solutions end-to-end, from ideation to deployment Experimentation is a key part of your workflow; be data-driven and make the right decisions for our customers Dep

Why Sony Interactive Entertainment? Sony Interactive Entertainment isn’t just the Best Place to Play — it’s also the Best Place to Work. Sony Interactive Entertainment (SIE) is the company behind the PlayStation brand. As a subsidiary of Sony Group Corporation, we’re part of a proud legacy of innovation and excellence. SIE is a dynamic technology company, delivering cutting-edge hardware and network services to more than 100 million people and an entertainment leader, home to some of the most beloved and recognizable intellectual properties (IP) in the world. Our role at SIE is to create and nurture the experiences under the PlayStation brand, a name synonymous with entertainment excellence and creativity. Department overview: We have an exciting opportunity to join Sony Interactive Entertainment, PlayStation. We seek a senior full-stack web developer within the DevNet team. DevNet is our web portal used worldwide by which developers interact and supply their content onto the PlayStation platform, including games, movies, music and more. This senior engineer would be responsible for helping us balance the challenge of modernising a mature and fully featured application while making our industry-leading portal even better. The ideal candidate would have worked on and supported large web projects before in an agile SCRUM team, with demonstrable experience in all levels of web application development. The candidate should be willing to lead the development team when necessary and support the current leadership team, and also have a desire to move into a leadership position. If this is you, please apply! What you’ll be doing: Develop and support a large-scale web application while contributing to its ongoing modernisation. Build new cloud-based services using technologies such as Go, TypeScript and AWS. Create high-quality front-end experiences in close collaboration with Product and UX. Help break down features, plan achievable iterations and contrib

The Role As a Senior Application Security Engineer, you will provide hands-on technical delivery for the migration of Web Application Firewall (WAF) capabilities to Cloudflare and/or Akamai. You will work closely with architecture, security, network, and application teams to execute migration waves, onboard applications, implement security policies, and support successful cutovers. You will play a key role in validating functionality, security, and performance, resolving technical issues, and supporting post-migration stabilization across complex enterprise environments. What You’ll Do Deliver end-to-end WAF migrations to Cloudflare and/or Akamai, including configuration, application onboarding, and deployment. Implement and tune WAF security policies, rules, and controls in line with application and security requirements. Execute DNS and traffic-routing changes and support integrations required for successful application migration. Perform testing, troubleshooting, and validation to confirm functionality, security, and performance throughout migration waves. Partner with architecture, security, network, and application teams to support cutover activities, resolve technical issues, and stabilize services following migration. What We’re Looking For 10+ years of relevant experience in network security, application security, infrastructure engineering, or related technical roles, with substantial hands-on WAF experience. Strong hands-on experience configuring, migrating, and supporting enterprise WAF technologies, ideally Cloudflare and/or Akamai. Practical knowledge of DNS, HTTP/HTTPS, TLS, traffic routing, application delivery, and web security concepts. Experience implementing and tuning WAF policies and security rules, troubleshooting application traffic, and resolving migration or production issues. Demonstrated experience working collaboratively with architecture, security, network, and application teams to deliver complex technical changes. Bonus Points For Expe

The Subscriptions Mission is shaping the future of how millions of people discover, purchase, and experience Spotify Premium. We build the platforms and tools that power Spotify's global subscription business, enabling new offers, pricing strategies, and commerce experiences that help our business move quickly while delivering exceptional experiences for listeners. Join the Monaco squad, where we create the internal products that enable Spotify teams to launch, configure, and manage Premium offers with confidence. From subscriptions and prepaid products to pricing updates and promotional campaigns, our tools support business-critical operations through intuitive experiences, trusted workflows, and reliable platform services. As a Senior Web Engineer, you'll develop end-to-end solutions spanning modern web applications. Working closely with engineers, product managers, designers, and business partners, you'll help create the tools that enable Spotify's global subscription business to innovate safely, efficiently, and at scale. What You'll Do Build end-to-end features across modern web applications that support Spotify's global subscription business. Create intuitive internal products that enable business teams to launch, configure, and manage Premium offers through secure, guided workflows. Develop GraphQL and gRPC APIs that connect frontend applications with distributed platform services. Design efficient database schemas, implement data migrations, and optimize application performance using PostgreSQL. Build secure, reliable, and auditable systems that support business-critical financial operations and SOX-compliant approval workflows. Collaborate with engineers across the Subscriptions Mission to evolve shared platform capabilities, improve developer experience, and increase platform reliability. Write maintainable, well-tested code while contributi

Beacon Biosignals is transforming precision medicine for the brain, from clinical development to clinical care. For Life Sciences partners, we offer the leading at-home EEG platform for clinical development of novel therapeutics for neurological, psychiatric, and sleep disorders. Our Diagnostics business is building the most comprehensive at-home platform for precision diagnostics, combining EEG and cardiopulmonary signals to deliver reimbursable assessments for sleep and central nervous system disorders. Together, we're changing the way patients are diagnosed and treated for any disorder that affects brain physiology. What you will be doing: Beacon Biosignals is looking for a Senior Product Manager to own the roadmap and day-to-day product decisions for our clinician- and site-facing web application, the primary way clinicians, clinical research sites, and trial teams interact with Beacon's machine-learning-enabled brain health platform. This role reports to the Manager, Web Applications. In this role, you’ll work within Beacon's Web Apps team to drive major development milestones for the next generation of Beacon's web applications for clinicians and clinical sites. You’ll shape product direction in partnership with the team’s manager and turn it into quarterly plans your team can execute against. You’ll be a clear, credible voice for the product with external users and internal stakeholders such as Beacon’s clinical, scientific, regulatory, and commercial teams. This is a remote position, with a preference for candidates based near Beacon HQ in Boston, or another Beacon hub (e.g., New York City). What success looks like: Build deep knowledge of clinicians, sleep technicians, site coordinators, investigators, and sponsor teams, and use it to ensure the roadmap reflects their real needs and Beacon's business goals. Own a single product that serves both diagnostic and clinical trial workflows, identifying where needs overlap and diverge, and make clear, well-reasone

We’re building a world of health around every individual — shaping a more connected, convenient and compassionate health experience. At CVS Health®, you’ll be surrounded by passionate colleagues who care deeply, innovate with purpose, hold ourselves accountable and prioritize safety and quality in everything we do. Join us and be part of something bigger – helping to simplify health care one person, one family and one community at a time. Position Summary The Senior Security Engineer – Akamai & Edge Security Services designs, implements, administers, and optimizes security controls that protect enterprise web applications, APIs, and internet-facing services. This role provides senior technical expertise in Web Application Firewall (WAF), bot protection, DDoS mitigation, API security, DNS security, certificate management, and related edge security technologies. The position partners with application, cloud, infrastructure, network, and security teams to strengthen the enterprise digital perimeter, respond to security threats, troubleshoot complex issues, and continuously improve security controls and operational processes. The role participates in a rotating on-call schedule, approximately one week every six weeks, with occasional after-hours support for critical incidents and emergency changes. Key Responsibilities: Security Engineering & Administration Administer and optimize Akamai security tec

About the Job: As a Senior Full Stack Engineer on LaunchDarkly’s AgentControl team, you'll build critical systems such as the web application that customers interact with on a daily basis and distributed systems that power AI evaluations at scale. These systems enable customers to control, monitor, and optimize their agent’s functionality. LaunchDarkly’s AgentControl team is on a mission to manage the complete software development lifecycle for shipping agents to production, from configuring to benchmarking to observing and beyond. AgentControl enables teams to adjust agent behavior without needing a redeploy or code change, while also running experiments, monitoring agents in production, and putting guardrails around AI as usage scales. The product spans offline evals, real-time observability, prompt and workflow optimization, and decision-making around quality, accuracy, relevance, and cost. The AgentControl team has a huge opportunity ahead of it; it's a strategic bet for LaunchDarkly, and we need your help writing the next chapter in our story. Responsibilities: Build and maintain scalable backend services, distributed systems, and APIs that power the AgentControl product You’ll primarily work in Go, Python, and TypeScript and will work directly with other technologies and tools such as AWS, CockroachDB, Datadog, DeepEval, and FastAPI. Collaborate with internal stakeholders, including product managers, designers, and other LaunchDarkly engineering teams, to understand real-world challenges and improve GenAI workflows using our own platform. Keep up to date with the latest developments in the AI field and in software development best practices Continuously optimize the performance, reliability, and scalability of our systems Drive architecture and design discussions, offering thoughtful input and collaborating with peer engineers to identify trade-offs and make well-informed decisions Take ownership of code in production, participate in on-call rotations, a

Here at Appian, our values of Intensity and Excellence define who we are. We set high standards and live up to them, ensuring that everything we do is done with care and quality. We approach every challenge with ambition and commitment, holding ourselves and each other accountable to achieve the best results. When you join Appian, you’ll be part of a passionate team dedicated to accomplishing hard things, together. Senior Consultant Location: Chennai, India | Work Model: In Office Appian Customer Success is obsessed with delivering exceptional customer outcomes and driving mission-critical business impact. Grounded in our core values of Excellence and Intensity, we act as elite technical advisors to our commercial clients. By joining this high-performance team, you will champion a culture of candid communication and excellence while accelerating global adoption of our AI-Powered Process Automation platform. What You’ll Do Implement Scalable Platform Architecture: Build and maintain standards and tools to ensure high performance and resilience with a focus on reusability, schema design, data modeling , query performance, and responsive UX/UI best practices. Engineered Integrations: Perform hands-on design, code implementation, and unit testing using SQL views , stored procedures , and high-concurrency REST/SOAP web services/APIs . System-Level Troubleshooting: Rapidly diagnose performance bottlenecks, memory usage, CPU constraints, and network latency spikes across the web application stack. Performance Profiling & Analysis: Analyze database execution plans, system logs, and Locust load test outputs to isolate and resolve root-cause performance bottlenecks. Technical Quality & Enablement: Ensure continuous integration and delivery alignment by applying strong DevSecOps practices, robust automated testing, and clean coding standards. Required Qualifications Bachelor’s Degree in Computer Science, Engineering, Information Systems, or Mathematics. 8+ years of pro

At Snowflake, we are powering the era of the agentic enterprise. To usher in this new era, we seek AI-native thinkers across every function who are energized by the opportunity to reinvent how they work. You don’t just use tools; you possess an innate curiosity, treating AI as a high-trust collaborator that is core to how you solve problems and accelerate your impact. We look for low-ego individuals who thrive in dynamic and fast-moving environments and move with an experimental mindset — who rapidly test emerging capabilities to discover simpler, more powerful ways to deliver results. At Snowflake, your role isn't just to execute a function, but to help redefine the future of how work gets done. About the role The App Runtime team is building a platform that lets every Snowflake user go from an idea to a live, deployed web application (Node.js first) in minutes. We own the end-to-end experience of building and running apps, from Cortex AI-assisted development to deployment in a secure, scalable infrastructure. Apps built on the platform inherit Snowflake's security, governance, lineage, and access controls by default. See Deploy Faster with Snowflake Apps . As a Senior Full Stack Engineer, you will drive initiatives that span our product areas and tech stack. It’s a high-impact role - you will work on an early-stage, public-preview product. Your work will directly shape the product experience developers rely on. This role requires a unique combination of deep hands-on expertise with web frameworks, great UX design instincts, customer obsession and collaboration with backend teams. Responsibilities Build the AI-assisted, agentic development experiences that power App Runtime, spanning the full tech stack - React, Go, Python, and Java Stay deeply hands-on by authoring technical and design specs that consider the system holistically (frontend and backend) and implementing critical code Partner directly with customers, i.e. developers building Snowflake Apps, translati

About Us: Paytm is India's leading mobile payments and financial services distribution company. Pioneer of the mobile QR payments revolution in India, Paytm builds technologies that help small businesses with payments and commerce. Paytm’s mission is to serve half a billion Indians and bring them to the mainstream economy with the help of technology. Job Summary: We are seeking a highly motivated and skilled Akamai CDN & WAF Engineer with 2-5 years of hands-on experience in configuring, deploying, and managing Akamai's Content Delivery Network (CDN) and Web Application Firewall (WAF) solutions. The ideal candidate will possess a strong understanding of web performance optimization, security best practices, and have a proven track record of implementing and troubleshooting Akamai services in a production environment. This role requires a proactive individual with excellent problem-solving skills and the ability to collaborate effectively with cross-functional teams. Responsibilities: Configuration and Deployment: Configure and deploy Akamai CDN services (e.g., Domain onboarding, delivery rules, caching policies, origin configurations) and WAF rulesets (e.g., security policies, custom rules, DOS and client reputation) based on application requirements and security guidelines. Production Support: Provide day-to-day operational support for Akamai CDN and WAF infrastructure, including monitoring performance, identifying and resolving issues, and implementing necessary changes. Performance Optimization: Analyze website performance metrics and implement Akamai CDN features and configurations to optimize website speed, reduce latency, and improve user experience. Security Implementation: Implement and manage Akamai WAF policies to protect web applications from various security threats, including OWASP Top 10 vulnerabilities, bot attacks, and DDoS attacks. Rule Management: Create, review, and maintain custom WAF rules and exceptions based on application-specific ne