Senior test engineer

Senior test engineer

Position Description
Company Profile:
Founded in 1976, CGI is among the largest independent IT and business consulting services firms in the world. With 94,000 consultants and professionals across the globe, CGI delivers an end-to-end portfolio of capabilities, from strategic IT and business consulting to systems integration, managed IT and business process services and intellectual property solutions. CGI works with clients through a local relationship model complemented by a global delivery network that helps clients digitally transform their organizations and accelerate results. CGI Fiscal 2024 reported revenue is CA$14.68 billion and CGI shares are listed on the TSX (GIB.A) and the NYSE (GIB). Learn more at cgi.com.
Job Title: Penetration Testing
Position: Senior Test Engineer
Experience: 8+ Years
Category: Software Development/ Engineering
Shift: General
Main location: Bangalore/Hyderabad/Chennai
Position ID:
Employment Type: Full Time
Education Qualification: Bachelor’s degree in computer science or related field or higher with minimum 8 years of relevant experience.
Position Description:
We are looking for an experienced Test Engineer/Sr. Test Engineer – Penetration Testing- to join our team. The ideal candidate should be passionate about coding and developing scalable and high-performance applications.
#LI-SP40

Your future duties and responsibilities
• Perform penetration testing on web applications, APIs, mobile applications, thick clients, and enterprise platforms including SAP
• Conduct manual and automated vulnerability assessments and security testing
• Identify and exploit vulnerabilities such as SQL Injection, XSS, CSRF, IDOR, and RCE
• Manage vulnerability lifecycle including identification, validation, prioritization, and tracking
• Perform secure code reviews and validate SAST findings
• Use security tools such as Burp Suite, Nmap, Metasploit, Nessus, SQLMap, OWASP ZAP, and Checkmarx
• Apply knowledge of OWASP Top 10, CVE, CWE, and CVSS frameworks
• Prepare detailed vulnerability reports with risk ratings and remediation recommendations
• Communicate security findings to both technical and non-technical stakeholders
• Collaborate with developers and application teams to remediate vulnerabilities
• Support security testing integration within SDLC and CI/CD pipelines

Required qualifications to be successful in this role
Must-Have Skills
• 8–10 years of experience in penetration testing and application security
• Strong hands-on experience in manual and automated security testing
• Expertise in web, API, mobile, and enterprise application security testing
• Deep understanding of OWASP Top 10 vulnerabilities and exploitation techniques
• Strong knowledge of CVE, CWE, and CVSS scoring systems
• Hands-on experience with tools like Burp Suite, Nmap, Metasploit, Nessus, SQLMap, OWASP ZAP, and Checkmarx
• Experience in secure code review and SAST validation
• Strong understanding of authentication, authorization, and session management mechanisms
• Excellent analytical, problem-solving, and debugging skills
• Strong communication and reporting skills
Good-to-Have Skills
• Experience in SAP security testing
• Knowledge of cloud security in AWS, Azure, or GCP
• Familiarity with DevSecOps and CI/CD security practices
• Experience with DAST, SAST, and IAST tools
• Relevant certifications such as OSCP, OSWE, CEH, GWAPT, or CISSP
• Experience in threat modeling and risk assessment
• Exposure to bug bounty programs or red team exercises
CGI is an equal opportunity employer. In addition, CGI is committed to providing accommodation for people with disabilities in accordance with provincial legislation. Please let us know if you require reasonable accommodation due to a disability during any aspect of the recruitment process and we will work with you to address your needs.

Together, as owners, let’s turn meaningful insights into action.

Life at CGI is rooted in ownership, teamwork, respect and belonging. Here, you’ll reach your full potential because…

You are invited to be an owner from day 1 as we work together to bring our Dream to life. That’s why we call ourselves CGI Partners rather than employees. We benefit from our collective success and actively shape our company’s strategy and direction.

Your work creates value. You’ll develop innovative solutions and build relationships with teammates and clients while accessing global capabilities to scale your ideas, embrace new opportunities, and benefit from expansive industry and technology expertise.

You’ll shape your career by joining a company built to grow and last. You’ll be supported by leaders who care about your health and well-being and provide you with opportunities to deepen your skills and broaden your horizons.

Come join our team—one of the largest IT and business consulting services firms in the world.