Application Penetration Tester

Introduction

Join a globally recognized technology leader headquartered in Letterkenny, County Donegal, Ireland. This permanent full-time position offers onsite employment with potential flexibility for a hybrid work model after completing the training phase. Be part of a team with over 850 professionals in a state-of-the-art global delivery center, proudly recognized as Workplace of the Year by the Letterkenny Chamber. Our culture emphasizes continuous learning, innovation, and mutual respect, enabling collaboration across disciplines and geographies to drive impactful change for clients worldwide.

About the Role

We are looking for an experienced Application Penetration Tester to join the Attack Surface Management team for a major U.S.-based financial services client. You will play a key role in identifying system vulnerabilities and guiding development teams in implementing effective remediation strategies.

Key Responsibilities

• Execute thorough manual penetration testing on web, mobile applications, and APIs (REST/SOAP).
• Engage with clients to define application scope, functionality, and specific testing requirements ensuring accurate penetration tests.
• Prepare detailed reports outlining vulnerabilities, associated risks, and recommended remediation actions, communicating these findings clearly to clients for actionable steps.
• Perform retesting of resolved vulnerabilities to confirm remediation effectiveness and compliance with security standards.
• Maintain strong client relationships through consistent communication, expert advice, and support during the testing lifecycle.
• Contribute to team growth by sharing new ideas and collaborating to enhance testing methodologies and processes.
• Stay current with emerging security threats through ongoing research and knowledge development.

Required Skills and Experience

• Several years of professional experience conducting application penetration testing across web, mobile, and API platforms.
• Comprehensive knowledge of the OWASP Web Security Testing Guide (WSTG) to effectively assess web application vulnerabilities.
• Proficiency in applying the Common Vulnerability Scoring System (CVSS) to prioritize risks accurately.
• Strong ability to provide clear and actionable remediation guidance for identified security issues.
• Experience working with tools and platforms such as Burp Suite Professional, Jira, ServiceNow, and Dynamic Application Security Testing (DAST) scanners.
• Capability to manage multiple key tasks efficiently without compromising quality.
• Excellent verbal and written communication skills, able to convey complex vulnerabilities and risks to technical and non-technical stakeholders.
• Proven aptitude in producing structured, evidence-based reports for client presentation.
• Experience coordinating tasks across multiple programs simultaneously.

Preferred Qualifications

• Experience in manual penetration testing of iOS and Android mobile applications.
• Professional certifications such as Burp Suite Certified Practitioner (BSCP), Hack The Box Certified Penetration Testing Specialist (HTB CPTS), or Offensive Security Certified Professional (OSCP).
• Knowledge of penetration testing within AI-driven applications using guidelines like the OWASP AI Testing Guide.
• Background in network and infrastructure penetration testing.
• Development experience in related fields.
• Previous exposure to the financial services sector.
• Ability to communicate in Japanese, Spanish, or Portuguese is a plus.

Compensation and Benefits

Tata Consultancy Services is recognized globally as a top employer with competitive remuneration packages. Benefits include pension schemes, healthcare coverage, life insurance, provision of laptops, and access to extensive training and discounts across the Tata network. The company promotes health and wellness programs, sponsors events such as the London Marathon, and actively engages with local communities in Ireland.

Diversity and Accessibility

We are committed to fostering an inclusive work environment consistent with Irish equality laws. We welcome applicants from diverse backgrounds, including race, ethnicity, disability, neurodiversity, gender identity, sexual orientation, and age. We encourage applications from disabled candidates and ensure reasonable accommodations throughout the recruitment process.

Important Notices

Applicants are warned against fraudulent recruitment practices. TCS never requests payments or fees and does not use free email services for official communication. Any suspicious activity should be reported promptly.

Due to the volume of applications, only successful candidates will be contacted within 30 days.