Project Role : Security Architect
Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.
Must have skills : Application Security
Good to have skills : NA
Minimum 2 year(s) of experience is required
Educational Qualification : 15 years full time education

Summary:
The Senior Application Penetration Testing Engineer will provide specialized manual security testing services for web and API applications. The role is responsible for identifying exploitable security weaknesses, validating risk, and supporting remediation to ensure applications meet agreed security and compliance requirements.

Roles & Responsibilities:
-Conduct manual penetration testing of web applications and REST APIs in accordance with industry recognized methodologies.
-Identify, validate, and exploit vulnerabilities aligned to OWASP Top 10 (Web & API).
-Perform testing across authentication, authorization, session management, input validation, and business logic layers.
-Validate findings to eliminate false positives and determine real world exploitability.
-Assess business impact and risk severity of identified vulnerabilities.
-Support retesting and verification post remediation.
-Deliver clear, client ready security assessment reports including:
-Confirmed vulnerabilities with evidence (PoC)
-Risk rating and impact analysis
-Actionable remediation guidance
-Provide executive level summaries suitable for leadership and governance forums.
-Collaborate with application owners, development teams, and security stakeholders to support remediation efforts.
-Participate in risk walkthroughs, remediation discussions, and security sign off reviews as required.
-Track findings through closure using enterprise vulnerability management platforms (e.g., ServiceNow SNVR).
-Maintain audit ready documentation aligned to client security governance processes.


Professional & Technical Skills:
–hands on experience in manual application penetration testing.
-Strong practical knowledge of OWASP Top 10 (Web & API).
-Experience supporting security assessments aligned to PCI DSS v4 requirements.
-Proven expertise with tools such as:
-Burp Suite Professional
-Nmap
-API testing tools (Bruno / Insomnia / Postman)
-Qualys (or equivalent)
-ServiceNow SNVR (or equivalent tracking tools)
-Strong written and verbal communication skills suitable for client and leadership audiences.
-Ability to translate technical findings into business relevant risk statements.
-Demonstrated experience working in enterprise or regulated environments.
-Good to have certifications like CEH, OSCP, GWAPT, GPEN etc.

Additional Information:
- The candidate should have minimum 2 years of experience in Application Security.
- This position is based at our Bengaluru office.
- A 15 years full time education is required.

15 years full time education

About Accenture

Accenture is a leading global professional services company that helps the world’s leading businesses, governments and other organizations build their digital core, optimize their operations, accelerate revenue growth and enhance citizen services—creating tangible value at speed and scale. We are a talent- and innovation-led company with approximately 791,000 people serving clients in more than 120 countries. Technology is at the core of change today, and we are one of the world’s leaders in helping drive that change, with strong ecosystem relationships. We combine our strength in technology and leadership in cloud, data and AI with unmatched industry experience, functional expertise and global delivery capability. Our broad range of services, solutions and assets across Strategy & Consulting, Technology, Operations, Industry X and Song, together with our culture of shared success and commitment to creating 360° value, enable us to help our clients reinvent and build trusted, lasting relationships. We measure our success by the 360° value we create for our clients, each other, our shareholders, partners and communities.

Visit us at www.accenture.com

Equal Employment Opportunity Statement

We believe that no one should be discriminated against because of their differences. All employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, military veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other basis as protected by applicable law. Our rich diversity makes us more innovative, more competitive, and more creative, which helps us better serve our clients and our communities.