Description

Lead end-to-end security engagements from client scoping through technical execution and final reporting.

Responsibilities

• Execute penetration tests on network, web, mobile (Android/iOS), APIs, cloud, and thick client applications.
• Conduct red team assessments and social engineering tests to identify security gaps.
• Analyze vulnerabilities and produce detailed reports with exploitation procedures, risks, and remediation strategies.
• Perform technical quality reviews and communicate complex security concepts to technical and executive audiences.
• Mentor junior testers and guide clients on security best practices.

Required Skills

• 3-9 years of experience in penetration testing.
• Deep understanding of OWASP Top 10 and SANS Top 25 vulnerabilities.
• Hands-on experience with BurpSuite, Nessus, Nmap, and Kali Linux.
• Proficiency in Windows, Linux, and Unix environments.
• Strong knowledge of Active Directory attacks and enterprise security controls.
• Experience testing cloud environments including AWS, Azure, and GCP.
• Competency with TCP/IP, OSI layers, IPv4/IPv6, and network protocols.
• Ability to use scripting languages (Python, Perl, PHP, or Ruby) for automation.
• Familiarity with SDLC and agile environments through source code reviews.

Preferred Skills

• K knowledge of AI applications in penetration testing.
• Experience with Operational Technology (OT), IoT, and 802.1x penetration testing.

Key Skills

Education

BE/ B.Tech/ MCA