Penetration Tester

About the Role

This is a full-time, on-site Penetration Tester role based in Delhi, India.

Key Responsibilities

• Plan and execute security assessments on web applications, mobile applications, networks, and infrastructure.
• Identify vulnerabilities and validate security controls.
• Conduct manual and automated penetration tests.
• Document findings.
• Prepare clear reports.
• Present remediation recommendations to technical and non-technical stakeholders.
• Perform red team exercises, simulating real-world attacks.
• Collaborate with security and development teams to improve overall security posture.
• Research emerging threats, tools, and techniques.
• Contribute to internal security methodologies.
• Maintain up-to-date knowledge of industry standards and regulations.

Requirements & Tech Stack

• Application Security and Cybersecurity skills, including secure coding concepts, vulnerability identification, and common attack vectors.
• Reverse Engineering and Malware Analysis skills.
• Red Teaming skills, including adversary simulation, social engineering awareness, and advanced intrusion techniques.
• Experience with penetration testing tools and frameworks (e.g., Burp Suite, Nmap, Metasploit, Wireshark, Kali Linux).
• Experience with scripting languages such as Python or Bash.
• Strong analytical and problem-solving abilities.
• Clear written and verbal communication.
• Capacity to document findings in structured reports.
• Ability to work collaboratively with cross-functional teams on-site in Delhi.
• Adherence to ethical guidelines and legal requirements.

Qualifications

• A relevant degree or diploma in Computer Science, Information Security, or a related field, or equivalent practical experience, is preferred.
• Professional certifications such as OSCP, CEH, GPEN, or similar are beneficial.