Senior Penetration Tester

Job Role: Senior Penetration Tester

Experience: 8+ years

Location: Bangalore (Hybrid - 3days/week in office)

Notice Period: Up to 15 days (Immediate joiners ONLY)

Role Summary:

Seeking an experienced Senior Penetration Tester to lead complex security assurance engagements, perform advanced penetration testing, define testing strategies, mentor team members, and strengthen the organization's security posture across applications, infrastructure, cloud, and AI/ML systems.

Key Responsibilities:

• Lead and independently execute highly technical penetration testing and security assurance engagements.
• Design and implement new penetration testing methodologies aligned with business and security objectives.
• Manage and optimize the value delivered by external penetration testing vendors and budgets.
• Contribute to the mid- and long-term Security Assurance strategy.
• Identify capability gaps and help grow the Security Assurance function.
• Mentor and coach junior and mid-level penetration testers.
• Perform and provide expertise in threat modeling.
• Conduct Web Application and API penetration testing.
• Conduct Mobile Application penetration testing.
• Conduct Infrastructure and Cloud penetration testing.
• Lead Purple Team assessments.
• Assess AI/ML-powered systems, including LLMs and AI-assisted developer tools.
• Identify AI-specific threats including prompt injection, data poisoning, model abuse, and related attack vectors.
• Provide remediation guidance considering business roadmap, technical landscape, and risk.
• Stay current with emerging vulnerabilities, attack techniques, and AI/ML security trends.
• Coordinate internal teams, external vendors, and stakeholders to deliver successful testing engagements.
• Prepare and present technical and executive-level penetration test reports.
• Collaborate with cross-functional teams across Booking.com and Booking Holdings.
• Support cross-brand security assurance initiatives.
• Train developers and other technical teams on penetration testing concepts and vulnerability identification.

Required Technical Expertise:

• Threat Modeling
• Web Application & API Security Testing
• Mobile Application Security Testing
• Infrastructure & Cloud Security Testing
• Purple Team Assessments
• AI/ML & Large Language Model (LLM) Security
• Security Reporting & Risk Communication
• Stakeholder Management
• Vendor Management
• Security Strategy & Mentoring

Preferred Qualifications:

Extensive experience in penetration testing, offensive security, vulnerability assessment, security assurance, and mentoring technical teams. Strong communication skills with the ability to present findings to both technical and executive stakeholders.