AVEVA is creating software trusted by over 90% of leading industrial companies.
Position: R&D Senior Member of Technical Staff - Product Security - Penetration Testing
Qualifications: Experience executing penetration tests independently
Location:
Preferred: Bangalore, India with hybrid ~40% office, ~60% remote.
Available alternatives: Hyderabad, Mumbai, or fully remote.
Employment type: Regular, full-time, hybrid work arrangement
The Job
We are seeking a skilled and self-directed Senior Penetration Tester with 5+ years of experience to join AVEVA’s Product Security team. The ideal candidate is a technically well-rounded professional who can independently lead and execute penetration tests from scoping through final report delivery, with minimal oversight. This role demands breadth across attack surfaces including Web, APIs, OT, Mobile, as well as the depth to uncover complex vulnerabilities in both modern and legacy technology stacks.
Key responsibilities
Use a risk-based approach to rapidly identify the highest impact issues
Articulate technical and business risk of discovered issues
Coordinate security assessments with external service providers
Contribute to development of testing methodology, playbooks, and tooling
Essential requirements
Ability to plan, scope and independently execute end-to-end penetration tests
Experience producing high-quality reports with reproducible evidence and proof-of-concepts
Experience working directly with product teams during test and retest phases
Ability to provide actionable remediation and mitigation guidance aligned with industry practices
Frontier knowledge in state-of-the-art penetration testing techniques relevant to the evolving threat landscape
Desired skills and competencies
One or more relevant certifications (e.g. CEH, OSCP, GWAPT, or HTB)
Penetration testing of Web Applications, Web APIs, and Industrial software targets
Experience testing API protocols such as REST, gRPC, GraphQL, WebSocket
Established application security community presence (e.g. blog, presentations, attributed CVE’s)
Experience using penetration testing tools such as Burp Suite Pro, SQLMap, SysInternals.
R&D at AVEVA
Our global team of 2000+ developers work on an incredibly diverse portfolio of over 75 industrial automation and engineering products, which cover everything from data management to 3D design. AI and cloud are at the centre of our strategy, and we have over 150 patents to our name.
Our track record of innovation is no fluke – it’s the result of a structured and deliberate focus on learning, collaboration and inclusivity. If you want to build applications that solve big problems and do impactful work, join us!
India Benefits include:
Gratuity, Medical and accidental insurance, very attractive leave entitlement, emergency leave days, childcare support, maternity, paternity and adoption leaves, education assistance program, home office set up support (for hybrid roles), well-being support
It’s possible we’re hiring for this position in multiple countries, in which case the above benefits apply to the primary location. Specific benefits vary by country, but our packages are similarly comprehensive.
Find out more: aveva.com/en/about/careers/benefits/
Hybrid working
We work in a hybrid way at AVEVA. Most roles are based at a local AVEVA office, with an expectation of being on-site 50% of your working hours to support collaboration and connection. Some positions are fully office-based depending on the nature of the work, and certain roles that support specific customers or markets may be remote. The working arrangement for this position will be confirmed during the hiring process.
Hiring process
Interested? Great! Get started by submitting your cover letter and CV through our application portal. AVEVA is committed to recruiting and retaining people with disabilities. Please let us know in advance if you need reasonable support during your application process.
Find out more: aveva.com/en/about/careers/hiring-process
About AVEVA
AVEVA is a global leader in industrial software with more than 6,500 employees in over 40 countries. Our cutting-edge solutions are used by thousands of enterprises to deliver the essentials of life – such as energy, infrastructure, chemicals, and minerals – safely, efficiently, and more sustainably.
We are committed to embedding sustainability and inclusion into our operations, our culture, and our core business strategy. Learn more about how we are progressing against our ambitious 2030 targets: sustainability-report.aveva.com/
Find out more: aveva.com/en/about/careers/
AVEVA requires all successful applicants to undergo and pass a drug screening and comprehensive background check before they start employment. Background checks will be conducted in accordance with local laws and may, subject to those laws, include proof of educational attainment, employment history verification, proof of work authorization, criminal records, identity verification, credit check. Certain positions dealing with sensitive and/or third-party personal data may involve additional background check criteria.
AVEVA is an Equal Opportunity Employer. We are committed to being an exemplary employer with an inclusive culture, developing a workplace environment where all our employees are treated with dignity and respect. We value diversity and the expertise that people from different backgrounds bring to our business. AVEVA provides reasonable accommodation to applicants with disabilities where appropriate. If you need reasonable accommodation for any part of the application and hiring process, please notify your recruiter. Determinations on requests for reasonable accommodation will be made on a case-by-case basis.
Skills Required
- 5+ years of penetration testing experience
- Ability to plan, scope and independently execute end-to-end penetration tests
- Experience executing penetration tests across Web, APIs, OT, and Mobile attack surfaces
- Experience producing high-quality reports with reproducible evidence and proof-of-concepts
- Experience working directly with product teams during test and retest phases
- Ability to provide actionable remediation and mitigation guidance aligned with industry practices
- Frontier knowledge of state-of-the-art penetration testing techniques
- Relevant certifications (e.g., CEH, OSCP, GWAPT, HTB)
- Experience testing API protocols such as REST, gRPC, GraphQL, WebSocket
- Experience using penetration testing tools such as Burp Suite Pro, SQLMap, SysInternals
- Established application security community presence (blog, presentations, attributed CVEs)
AVEVA Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about AVEVA and has not been reviewed or approved by AVEVA.
-
Leave & Time Off Breadth — Time away from work is positioned as a meaningful part of the rewards mix, including paid time off that can increase with tenure and additional paid volunteering days. This breadth is reinforced by mentions of public holidays and emergency leave as part of the overall time-off offering.
-
Wellbeing & Lifestyle Benefits — Wellbeing support appears broad and multi-channel, combining counseling access, coaching resources, and region-specific digital wellbeing tools. Flexible work hours and a hybrid model are also presented as lifestyle-supporting elements within the broader rewards package.
-
Career-Linked Recognition & Rewards — Recognition is tied to tenure milestones through a formal program that provides rewards and symbolic recognition. Development-linked rewards also appear through learning access, mentorship, and education reimbursement that connects benefits to skill growth.
AVEVA Insights
What We Do
AVEVA is a global leader in industrial software, sparking ingenuity to drive responsible use of the world’s resources. The company’s secure industrial cloud platform and applications enable businesses to harness the power of their information and improve collaboration with customers, suppliers and partners. Over 20,000 enterprises in over 100 countries rely on AVEVA to help them deliver life’s essentials: safe and reliable energy, food, medicines, infrastructure and more. By connecting people with trusted information and AI-enriched insights, AVEVA enables teams to engineer efficiently and optimize operations, driving growth and sustainability. Named as one of the world’s most innovative companies, AVEVA supports customers with open solutions and the expertise of more than 6,400 employees, 5,000 partners and 5,700 certified developers. With operations around the globe, AVEVA is headquartered in Cambridge, UK. Learn more at www.aveva.com
