You apply on First Soft Solutions' website. CoreHRx takes you there after you sign in.
CoreHRx never asks candidates for money. If anyone does, .
Sign in to see your fit: the skills, experience and location this job asks for, checked against your profile.
API Penetration Tester
Location: India
Work Model: Remote / Offshore
Experience: 4 8 Years
Engagement: Contract / Project-Based
Job Summary
We are looking for an experienced API Penetration Tester to support a cybersecurity project for a Canadian public-sector client.The ideal candidate should have strong hands-on experience in API and web application security testing, especially manual penetration testing.
Responsibilities
The candidate will test APIs for security vulnerabilities, review authentication and authorization controls, identify business-logic issues, validate findings, and prepare clear technical reports.
The role will include testing REST APIs, user roles, tokens, API keys, access controls, data exposure, input validation, and other common API security risks.
The candidate will also participate in remediation validation after identified issues are fixed.
Required Skills
Strong experience with:
API and Web Application Penetration Testing
OWASP API Security Top 10
Burp Suite
Postman
Swagger / OpenAPI
JWT, OAuth 2.0 and API authentication
Authorization and privilege escalation testing
Business-logic testing
Vulnerability validation and reporting
Experience with Python, Nmap, OWASP ZAP, Azure, AWS, or API gateways is an added advantage.
Experience
Candidates should have 4 - 8 years of cybersecurity experience, with strong hands-on experience in application or API penetration testing.
Experience working with enterprise, government, financial, healthcare, or other regulated clients is preferred.
Certifications
Certifications such as OSCP, eWPT, Burp Suite Certified Practitioner, CEH, GPEN, or GWAPT are preferred but not mandatory.
Communication
The candidate should have good written and verbal English communication skills and be comfortable joining occasional meetings with Canadian client teams.
Important
This is a hands-on penetration-testing role.
Candidates whose experience is mainly running automated vulnerability scanners without strong manual testing experience may not be suitable.
Most IT Jobs posts in Chennai ask for 3–6 years of experience (39% of 428 that say).
From live job posts on CoreHRx, updated 1 Nov 2026. Skill figures count posts that list their skills; salary figures only posts that show a salary.
The post does not state the pay. As an estimate, comparable posts on CoreHRx advertise ₹11L – ₹24L a year (typical for IT Jobs in India, 907 posts).
The post asks for 4–8 Yrs experience.
It is a remote job, listed under Chennai.
It is a full time job.
You apply on First Soft Solutions' website. CoreHRx takes you there after you sign in.
Interview preparation · 60 questions
This page is for Indian job seekers preparing for cloud engineer, DevOps, backend and solutions architect roles that list AWS as a skill, whether you are a fresher with a first certification or an experienced engineer moving into a senior role. It covers 60 questions in three levels: core services and concepts, then design and configuration choices for one to three years of experience, and finally scenario, security, cost and troubleshooting questions asked in senior rounds. Read each answer, explain it aloud in your own words, and try the CLI commands in a practice account with a billing alert set.
Questions you may be asked
Create a free profile and we email you new IT jobs you can do remotely, at most once a week.
