Home
Department: Cybersecurity – Security Testing
Experience: 2+ Years
Location: Andheri / Dombivli
Employment Type: Full-Time
Joining Preference: Immediate Joiners Preferred

About the Role

Talakunchi Networks Pvt. Ltd. is looking for experienced and technically skilled Penetration Testers / Security Analysts to join our Security Testing team.
The role involves hands-on security assessments across Application Security, Web/API/Mobile Security Testing, Secure Code Review and Infrastructure VAPT. Candidates will work on real-world security engagements, vulnerability identification, remediation validation, client interactions and compliance-driven security assessments, particularly within BFSI and payment environments.

Key Responsibilities

  • Perform Application Security Testing and Infrastructure VAPT based on defined methodologies and industry standards.
  • Conduct Web, API and Mobile Application Security Testing.
  • Perform infrastructure VAPT across servers, networks, firewalls, endpoints and related components.
  • Identify, validate and assess security vulnerabilities and misconfigurations.
  • Analyze authentication, authorization, access control, session management, business logic and API security.
  • Conduct Secure Code Review (SCR) and identify insecure coding practices where applicable.
  • Perform vulnerability retesting and remediation validation.
  • Prepare detailed security assessment and VAPT reports with evidence, impact, risk ratings and remediation recommendations.
  • Work closely with development, infrastructure, application and customer teams to address security findings.
  • Support security assessments for BFSI, banking, UPI and payment applications.
  • Support PCI-DSS and other security compliance assessments.
  • Participate in client discussions, technical walkthroughs and security review meetings.
  • Maintain assessment documentation and ensure timely completion of assigned deliverables.

Application Security – Required Skills

  • 2+ years of hands-on experience in Application Security / AppSec / VAPT.
  • Strong understanding of OWASP Top 10 and application security fundamentals.
  • Hands-on experience in Web and API Security Testing.
  • Exposure to Mobile Application Security Testing is preferred.
  • Understanding of JWT, OAuth, authentication, authorization and business logic vulnerabilities.
  • Hands-on experience with tools such as Burp Suite, Postman and OWASP ZAP.
  • Experience with MobSF, Frida or Objection is an advantage.
  • Basic understanding of programming languages such as Java, Python, .NET or equivalent.
  • Secure Code Review experience is an advantage.

Infrastructure VAPT – Required Skills

  • 2+ years of hands-on experience in Infrastructure VAPT / Penetration Testing.
  • Strong understanding of TCP/IP, DNS, routing, switching and firewalls.
  • Experience assessing servers, networks, endpoints and infrastructure components.
  • Knowledge of common infrastructure vulnerabilities, misconfigurations and attack vectors.
  • Hands-on experience with tools such as Nmap, Nessus, Wireshark or similar.
  • Ability to validate vulnerabilities and provide practical remediation recommendations.
  • Strong report writing and technical documentation skills.

BFSI & Compliance Exposure

Experience in any of the following will be preferred:
  • Banking / BFSI environments
  • UPI and payment applications
  • PCI-DSS assessments
  • Security compliance audits
  • Client-facing security assessment engagements

Team Coordination & Client Interaction

  • Coordinate with junior security testers and support task allocation where required.
  • Review vulnerability findings and security reports for technical accuracy.
  • Mentor junior team members on security testing methodologies and vulnerability validation.
  • Coordinate with developers, infrastructure teams, application owners and client stakeholders.
  • Track remediation, retesting and closure of identified vulnerabilities.
  • Participate in client meetings and explain technical findings and remediation requirements.

Preferred Certifications

  • CEH
  • eWPT / eMAPT
  • OSCP / OSWE
  • CREST or equivalent
  • CCNA for Infrastructure VAPT profiles
Practical hands-on experience will be preferred over certification alone.

Qualification

  • Bachelor's degree in Computer Science, Information Technology, Cybersecurity or an equivalent field.
  • 2+ years of relevant cybersecurity experience.
  • Immediate joiners are preferred.
  • Candidates serving a notice period may also be considered based on the requirement.
  • Strong analytical and problem-solving skills.
  • Excellent technical documentation and communication skills.
  • Ability to work in a structured, client-facing and compliance-driven environment.
  • Willingness to travel to customer locations as required.

Important Instructions

  • Candidates must upload their educational and relevant qualification documents under Additional Documents in HRMS.
  • Candidates should be comfortable working from the Andheri/Dombivli office and customer locations as required.

View all job openings