Vulnerability and Penetration Specialist

Job description

**About Sonata Software** Sonata Software, with over $1.2 Billion Revenue, is a leading AI-first Modernization Engineering company, powered by our unique PlatformationTM framework. Our 6400+ AI Engineers are helping enterprises transform from systems to intelligent business platforms leveraging partner ecosystem to drive speed, efficiency and growth. Our bouquet of Modernization Engineering Services with AI -first approach cuts across Cloud, Data, AI, Dynamics, Test Automation, and Managed Services. Sonata’s AI-led modernization is enabled by a powerful suite of proprietary tools and assets. At the core is the **Harmoni.AI** Enterprise Platform, which includes **Agent Bridge** -a governance and observability framework; **Agent Builder** -a development toolkit for fungible agents integrated into enterprise systems; and the **Agent Marketplace** -an internal ecosystem for modular, reusable agents. Headquartered in Bengaluru, India, Sonata Software has a strong global presence, including key regions US, UK, India, Malaysia, Mexico, Australia, DACH (Germany/Switzerland) & Nordics (Finland). We are a trusted partner of Fortune 500 companies in Banking, Financial Services and Insurance; Healthcare and Lifesciences; Telecom, Media, and Technology; and Retail, Manufacturing and Distribution space. Deep collaborations with partners like Microsoft, AWS, Salesforce, and Snowflake strengthen our ability to deliver cutting-edge AI solutions. Our 30+years of partnership with Microsoft, and being part of the elite Microsoft Inner Circle, places us among the top 1% of global Microsoft partners. Sonata is now among the first companies to earn the **Microsoft Frontier Partner Badge** Also; Sonata Software is proud to achieve AWS Premier Tier Status in the AWS Partner Network. **Job Title- Security Engineer** – Penetration testing **Location- Noida** **Experience : 5 – 8 years** **Mandatory skills : Penetration testing, OWASP, Red teaming.** **Job Description** We are looking for a **Security Engineer – Penetration Testing** with strong experience in offensive security to identify and remediate security vulnerabilities across web applications, APIs, infrastructure, cloud environments, and AI/GenAI platforms. The ideal candidate should have hands-on experience in penetration testing, red teaming, and security assessment of modern applications and cloud environments. **Key Responsibilities** - Perform penetration testing on web applications, APIs, networks, and cloud environments. - Identify and validate security vulnerabilities using industry-standard tools. - Conduct application security assessments, infrastructure testing, and Active Directory security reviews. - Perform red team exercises and adversary simulations. - Assess AI/LLM-based applications for prompt injection, jailbreak, and other GenAI security risks. - Develop automation scripts and custom security tools using Python or scripting languages. - Prepare technical reports with remediation recommendations and collaborate with development and security teams. **Required Skills** - 5+ years of experience in Penetration Testing, Red Teaming, or Offensive Security. - Strong knowledge of OWASP Top 10, API Security, and web application security. - Experience with Burp Suite, Metasploit, Nmap, Nessus, BloodHound, and Mimikatz. - Hands-on experience with AWS, Azure, or GCP security testing. - Strong scripting skills in Python (Bash/PowerShell is a plus). - Understanding of LLM/GenAI security, prompt injection, RAG, and AI security concepts is highly preferred. - Excellent analytical, communication, and problem-solving skills. **Preferred Qualifications** - Certifications such as OSCP, OSEP, OSCE, GPEN, GWAPT, or CRTO. - Experience in AI security, bug bounty programs, or advanced red team operations. **Why join Sonata Software?** At Sonata, you´ll have an outstanding opportunity. The chance to use your skills and imagination to push the boundaries of what´s possible. To build never seen before solutions to some of the world’s toughest problems. You´ll be challenged, but you will not be alone. You´ll be joining a team of diverse innovators, all driven to go beyond the status quo to craft what comes next. Sonata Software is an Equal Opportunity Employer encouraging diversity in the workplace. All qualified applicants will receive consideration for employment without regard to race, national origin, gender identity, age, religion, disability, sexual orientation, veteran status, marital status, or any other characteristics protected by law.