Penetration Testing and Offensive Security Engineer

GSPANN is hiring a Penetration Testing and Offensive Security Engineer in Gurugram / Hyderabad, IN, India. The details below summarise the original listing; applications happen on the original posting, not on GetFirstJob.

What the work involves

• Lead scoping calls to confirm testing timelines, prerequisites, and overall test readiness.
• Execute penetration tests using Burp Suite Pro, supported Invicti scans, and custom-built scripts.
• Identify, exploit, and document vulnerabilities with clear Proof of Concept (PoC) and post-exploitation analysis.
• Configure and run Dynamic Application Security Testing (DAST) scans while maintaining test plans, scripts, and reports.
• Prepare detailed technical and executive-level reports in client-approved formats and conduct walkthroughs with application teams.
• Create remediation tickets in Jira, validate fixes, perform retesting, and close findings with supporting evidence.
• Upload assessment reports and findings to Apiiro, manage the vulnerability lifecycle, and track remediation against defined Service Level Agreements (SLAs).

What they are looking for

• 6-8 years of experience in offensive security, Vulnerability Assessment and Penetration Testing (VAPT), or application penetration testing.
• Hands-on expertise with Burp Suite Pro, Invicti, and OWASP testing tools.
• Strong experience in Application Programming Interface (API) testing using tools such as Postman.
• Proven ability to produce high-quality security reports and communicate findings effectively to technical and business stakeholders.
• Working knowledge of OWASP Application Security Verification Standard (ASVS), Mobile Application Security Verification Standard (MASVS), and OWASP Top 10 vulnerabilities.

Pay and dates

The listing does not state pay. The source page shows a relative posting age rather than an exact posting date; this role was first seen and checked as open on 4 November 2026.

How to apply

Apply on the listing where the employer published this role: Penetration Testing and Offensive Security Engineer at GSPANN. We found this listing via careers.gspann.com; it was still open when we checked on 4 November 2026. If the posting has closed or the link fails, the role may have been filled.