Senior Penetration Tester
AVEVA
Senior Penetration Tester
AVEVA
Industrial software for SaaS asset management
AVEVA is creating software trusted by over 90% of leading industrial companies.
Position: R&D Senior Member of Technical Staff - Product Security - Penetration Testing
Qualifications: Experience executing penetration tests independently
Location:
Preferred: Bangalore, India with hybrid ~40% office, ~60% remote.
Available alternatives: Hyderabad, Mumbai, or fully remote.
Employment type: Regular, full-time, hybrid work arrangement
The Job
We are seeking a skilled and self-directed Senior Penetration Tester with 5+ years of experience to join AVEVA’s Product Security team. The ideal candidate is a technically well-rounded professional who can independently lead and execute penetration tests from scoping through final report delivery, with minimal oversight. This role demands breadth across attack surfaces including Web, APIs, OT, Mobile, as well as the depth to uncover complex vulnerabilities in both modern and legacy technology stacks.
Key responsibilities
Use a risk-based approach to rapidly identify the highest impact issues
Articulate technical and business risk of discovered issues
Coordinate security assessments with external service providers
Contribute to development of testing methodology, playbooks, and tooling
Essential requirements
Ability to plan, scope and independently execute end-to-end penetration tests
Experience producing high-quality reports with reproducible evidence and proof-of-concepts
Experience working directly with product teams during test and retest phases
Ability to provide actionable remediation and mitigation guidance aligned with industry practices
Frontier knowledge in state-of-the-art penetration testing techniques relevant to the evolving threat landscape
Desired skills and competencies
One or more relevant certifications (e.g. CEH, OSCP, GWAPT, or HTB)
Penetration testing of Web Applications, Web APIs, and Industrial software targets
Experience testing API protocols such as REST, gRPC, GraphQL, WebSocket
Established application security community presence (e.g. blog, presentations, attributed CVE’s)
Experience using penetration testing tools such as Burp Suite Pro, SQLMap, SysInternals.
R&D at AVEVA
Our global team of 2000+ developers work on an incredibly diverse portfolio of over 75 industrial automation and engineering products, which cover everything from data management to 3D design. AI and cloud are at the centre of our strategy, and we have over 150 patents to our name.
Our track record of innovation is no fluke – it’s the result of a structured and deliberate focus on learning, collaboration and inclusivity. If you want to build applications that solve big problems and do impactful work, join us!
India Benefits include:
Gratuity, Medical and accidental insurance, very attractive leave entitlement, emergency leave days, childcare support, maternity, paternity and adoption leaves, education assistance program, home office set up support (for hybrid roles), well-being support
It’s possible we’re hiring for this position in multiple countries, in which case the above benefits apply to the primary location. Specific benefits vary by country, but our packages are similarly comprehensive.
Find out more: aveva.com/en/about/careers/benefits/
Hybrid working
We work in a hybrid way at AVEVA. Most roles are based at a local AVEVA office, with an expectation of being on-site 50% of your working hours to support collaboration and connection. Some positions are fully office-based depending on the nature of the work, and certain roles that support specific customers or markets may be remote. The working arrangement for this position will be confirmed during the hiring process.
Hiring process
Interested? Great! Get started by submitting your cover letter and CV through our application portal. AVEVA is committed to recruiting and retaining people with disabilities. Please let us know in advance if you need reasonable support during your application process.
Find out more: aveva.com/en/about/careers/hiring-process
About AVEVA
AVEVA is a global leader in industrial software with more than 6,500 employees in over 40 countries. Our cutting-edge solutions are used by thousands of enterprises to deliver the essentials of life – such as energy, infrastructure, chemicals, and minerals – safely, efficiently, and more sustainably.
We are committed to embedding sustainability and inclusion into our operations, our culture, and our core business strategy. Learn more about how we are progressing against our ambitious 2030 targets: sustainability-report.aveva.com/
Find out more: aveva.com/en/about/careers/
AVEVA requires all successful applicants to undergo and pass a drug screening and comprehensive background check before they start employment. Background checks will be conducted in accordance with local laws and may, subject to those laws, include proof of educational attainment, employment history verification, proof of work authorization, criminal records, identity verification, credit check. Certain positions dealing with sensitive and/or third-party personal data may involve additional background check criteria.
AVEVA is an Equal Opportunity Employer. We are committed to being an exemplary employer with an inclusive culture, developing a workplace environment where all our employees are treated with dignity and respect. We value diversity and the expertise that people from different backgrounds bring to our business. AVEVA provides reasonable accommodation to applicants with disabilities where appropriate. If you need reasonable accommodation for any part of the application and hiring process, please notify your recruiter. Determinations on requests for reasonable accommodation will be made on a case-by-case basis.
AVEVA provides industrial software that helps companies digitally transform their operations in manufacturing, energy, and infrastructure. Its offerings are delivered as a subscription-based service (SaaS) for engineering asset management, rather than traditional perpetual licenses. The core product, CONNECT, is an open industrial intelligence platform that runs in the cloud and can scale as a business grows; it works with or without Schneider Electric hardware, thanks to its hardware-agnostic design. Along with software, AVEVA offers online training to help clients adopt the new SaaS model. Compared with competitors, AVEVA differentiates itself by being hardware-agnostic, offering a cloud-first, subscription platform, and an open platform that supports scalable, cloud-based engineering asset management. The company aims to help customers digitally transform their operations, improve efficiency, and reach broader markets through flexible, cloud-based software solutions.
Explore more opportunities at AVEVA