Senior Penetration Tester

About the role

AVEVA is looking for a self‑directed Senior Penetration Tester to join its Product Security team. You will lead end‑to‑end security assessments for a wide range of industrial software products, working independently from scoping to final report delivery.

Key responsibilities

• Plan, scope and execute comprehensive penetration tests across web, API, OT, and mobile attack surfaces.
• Identify high‑impact vulnerabilities using a risk‑based approach and provide clear business impact analysis.
• Coordinate assessments with external service providers and support product teams during test and retest cycles.
• Develop and refine testing methodology, playbooks, and custom tooling.

Required profile

• 5+ years of hands‑on penetration testing experience with minimal supervision.
• Proven ability to produce high‑quality reports with reproducible proof‑of‑concepts.
• Strong communication skills to articulate technical findings to both technical and business audiences.
• Relevant certifications such as CEH, OSCP, GWAPT, or HTB.

Required skills

• Burp Suite Pro
• SQLMap
• SysInternals
• Testing of REST, gRPC, GraphQL, and WebSocket APIs
• Web application and industrial software security testing

What we offer

• Permanent full‑time role with hybrid work arrangement (≈40% office, 60% remote).
• Competitive benefits package including gratuity, medical insurance, generous leave, childcare support, and home‑office setup assistance.
• Opportunity to work on cutting‑edge AI‑driven industrial automation products.