Description

You will conduct penetration testing and vulnerability assessments to identify and remediate security risks across client environments.

This role is hybrid.

Responsibilities

• Perform manual penetration testing on web apps, APIs, networks, cloud, Active Directory, and OT environments.
• Conduct secure code reviews using SAST and DAST tools to identify logic flaws and insecure patterns.
• Chain vulnerabilities into real-world attack scenarios and create detailed proof-of-concept (POC) reports.
• Present findings to clients and recommend actionable remediation strategies.
• Manage VAPT project workflows, test scheduling, and reporting.

Required Skills

• 2–3 years of hands-on experience in cybersecurity, SOC, or penetration testing.
• Proficiency in scripting with Python, PowerShell, or Bash.
• Solid understanding of OWASP Top 10, MITRE ATT&CK, and threat modeling.
• Hands-on experience with Nmap, Wireshark, Burp Suite, Metasploit, and BloodHound.
• Familiarity with SonarQube and other security testing tools.
• Strong documentation and communication skills for client reporting.

Preferred Skills

• OSCP, CRTP, CPENT, CEH, or eJPT certifications.
• Published CVEs, bug bounty recognition, or open-source security contributions.

Key Skills

Education

Any Graduate