Penetration Tester
- Forbes Global
- 5 - 10 years
- Pune
- 5 months ago
- Email to a friend
- Report this job
Job Description
Job Title: Penetration Test Engineer
Employment Type: Full-Time
Experience Required: 3 to 10 years
Job Summary:
We are seeking a highly skilled and detail-oriented Penetration Test Engineer to join our cybersecurity team. The ideal candidate will have hands-on experience conducting offensive security assessments and delivering actionable insights to improve security posture. You will be responsible for identifying vulnerabilities, simulating real-world attacks, and working closely with stakeholders to remediate security risks across applications, networks, and cloud infrastructure.
Key Responsibilities:
- Plan, execute, and report on penetration tests of applications, networks, APIs, cloud environments, and other IT assets
- Conduct threat modeling and vulnerability assessments
- Simulate real-world attacks to identify and exploit security weaknesses
- Provide detailed findings, risk ratings, and remediation recommendations to technical and non-technical audiences
- Collaborate with development, DevOps, and security teams to address vulnerabilities
- Develop custom scripts, tools, and exploits to enhance testing capabilities
- Stay up to date with emerging attack techniques, tools, and security trends
- Ensure testing aligns with industry standards such as OWASP Top 10, MITRE ATT&CK, and NIST
- Assist in red team exercises and advanced adversarial simulations as needed
- Contribute to continuous improvement of internal testing methodologies and processes
Required Skills & Qualifications:
- Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field
- 3 to 10 years of hands-on experience in penetration testing, ethical hacking, or offensive security
- Strong understanding of web, mobile, network, and cloud security
- Proficiency in tools such as Burp Suite, Metasploit, Nmap, Wireshark, Nessus, and Kali Linux
- Experience with scripting languages (e.g., Python, Bash, PowerShell)
- Familiarity with common vulnerabilities (e.g., XSS, SQLi, CSRF, privilege escalation, RCE)
- Knowledge of secure coding principles and software development lifecycle (SDLC)
- Excellent analytical, problem-solving, and communication skills
- Strong documentation and reporting abilities
Preferred Certifications:
- OSCP (Offensive Security Certified Professional)
- CEH (Certified Ethical Hacker)
- GPEN (GIAC Penetration Tester)
- CRTP, CRTE, or other red team/offensive security certifications
Preferred Attributes:
- Experience with cloud penetration testing (AWS, Azure, GCP)
- Exposure to red teaming or adversary simulation techniques
- Familiarity with security compliance frameworks (e.g., PCI-DSS, SOC 2, ISO 27001)
- Ability to think creatively and adapt to dynamic environments
- Passion for offensive security and continuous learning
Job Classification
Industry: IT Services & ConsultingFunctional Area / Department: IT & Information SecurityRole Category: IT SecurityRole: Application Security EngineerEmployement Type: Full timeContact Details:
Company: Forbes GlobalLocation(s): Pune
Keyskills: Vulnerability Assessment Oscp Penetration Testing Application Security Testing Network Penetration Testing Application Penetration Testing Vapt Security Testing Web Application Security Penetration Mobile Penetration Testing Source Code Review Penetrant Testing
Forbes Global
Industry -Software Development Company size -10,001+ employees Headquarters - Setagaya-ku, Tokyo Founded 1997 Specialties - E-commerce , Card & Payments, Life & Leisure support services, Communications & Energy & Mobile, Investment, Sports, Digital Contents, Open EC, AD, Affilia...
Job Listings
We are in open beta version of website, please let us know if any issues, at: info(at)indigojobs.in