Senior Penetration Tester (Vulnerability Assessment & Pen Testing)
- ISHIR
- 4 - 8 years
- Chennai
- 3 months ago
- Email to a friend
- Report this job
Job Description
Role Overview:
We are seeking a Senior Penetration Tester (VAPT Specialist) to join our team. The ideal candidate will have hands-on experience in identifying vulnerabilities, simulating cyberattacks, and delivering actionable recommendations to strengthen client security. You will be working on a diverse range of environments, including enterprise networks, web/mobile applications, cloud infrastructures, and OT/IoT systems across Australia and the Pacific.
Key Responsibilities:
- Conduct Vulnerability Assessments and Penetration Tests (VAPT) across networks, systems, web apps, mobile apps, APIs, and cloud environments.
- Develop detailed methodologies and execute tests in line with industry frameworks (OWASP, CREST, NIST, ISO 27001, Essential Eight, PCI DSS).
- Produce comprehensive reports highlighting findings, risk levels, and clear remediation strategies.
- Collaborate with clients IT/security teams to validate fixes and conduct retests.
- Stay updated with emerging threats, zero-days, and red-teaming techniques.
- Support pre-sales and proposal development with technical inputs when required.
Skills & Qualifications:
- Bachelor's degree in Cybersecurity, Computer Science, or related field (or equivalent experience).
- Minimum 5 years of hands-on penetration testing experience.
- Strong knowledge of manual and automated VAPT tools such as Burp Suite, Metasploit, Nessus, OpenVAS, Kali Linux, Nmap, Wireshark, and scripting (Python, PowerShell, Bash).
- Familiarity with Active Directory attacks, privilege escalation, and lateral movement techniques.
- Strong understanding of web vulnerabilities (OWASP Top 10), API flaws, and misconfigurations in cloud platforms (Azure, AWS, GCP).
- Excellent communication and report-writing skills.
Preferred / Nice to Have:
- CREST Registered Pen Tester, OSCP, OSWE, OSEP, CRTO, GPEN, or similar certifications.
- Experience in red teaming, social engineering, and phishing simulations.
- Exposure to SIEM, EDR, XDR platforms and threat-hunting practices.
What We Offer:
- Competitive salary package based on experience.
- Work with high-profile clients across Australia, Fiji, and the Pacific.
- Opportunity to grow into leadership or specialist roles (Red Team Lead, vCISO, SOC specialist).
- Hybrid/remote work flexibility.
- Training, certifications, and career growth opportunities.
Job Classification
Industry: IT Services & ConsultingFunctional Area / Department: IT & Information SecurityRole Category: IT SecurityRole: Security Engineer / AnalystEmployement Type: Full timeContact Details:
Company: BorderlessLocation(s): Chennai
Keyskills: Burp Suite Nessus Pen testing Vulnerability Assessment Kali Linux PowerShell Wireshark OpenVAS Metasploit Nmap privilege escalation
Similar positions
ISHIR
ISHIR ISHIR is a diversified offshore IT solutions company offering world class application services to help organization's exceed its technological expectations. Our competencies lie in onshore and offshore software development, maintenance and offshore project management services. ISHIR&am...
Job Listings
We are in open beta version of website, please let us know if any issues, at: info(at)indigojobs.in