Penetration Tester

Job Title:

Position Purpose:

Penetration Tester

Key Responsibilities:

Direct Responsibilities:

• Conduct

  penetration testing

  (Gray Box / Black Box) for

  Web applications, APIs, thick client applications, and infrastructure

  .
• Perform

  internal and external infrastructure penetration testing

  covering:
• Network devices (firewalls, routers, switches)
  
• Servers (Windows, Linux, UNIX)
  
• Cloud and hybrid environments
  
• Mainframe systems
  
• Conduct

  Vulnerability Assessment (VA)

  and exploit proof-of-concepts where applicable.
• Identify and assess

  misconfigurations, insecure protocols, patch management gaps, and authentication issues

  .
• Stay updated with the latest

  exploits, vulnerabilities, attack techniques, and tools

  relevant to infrastructure and application security.
• Define and document

  testing scope, security scenarios, and assessment procedures

  .
• Document and report findings clearly with actionable remediation recommendations.
  
• Collaborate with developers to explain vulnerabilities and provide mitigation guidance.
  
• Escalate critical issues affecting testing progress to local management or onshore stakeholders.
  
• Ensure adherence to internal

  security assessment processes

  and compliance standards.

Note:

• Mandatory:

  Infrastructure Penetration Testing, Web & API Penetration Testing

• Optional:

  Mobile Application Testing, Source Code Assessment (SCA/SAST)

Technical & Behavioral Competencies:

• Strong understanding of

  OWASP Top 10

  application security risks.
• Hands-on experience with tools such as

  Burp Suite, OWASP ZAP, Kali Linux

  .
• Skilled in

  manual security testing, exploit research, and vulnerability analysis

  .
• Knowledge of

  security test design and documentation

  .
• Excellent

  interpersonal, presentation, and communication

  skills.
• Strong

  analytical thinking, time management

  , and ability to work independently.
• Team-oriented, self-motivated, and adaptable in a fast-paced environment.
  

Preferred Qualifications / Certifications:

• CEH, OSCP, CSSLP

  , or equivalent industry-recognized certification preferred.

Interview process:

• L1 Technical Discussion with Virtual
• L2 Technical with Managerial discussion Face to Face (Client).
  

Work Location:

Work Mode:

Employment Type:

If anyone interested please share your updated resume below email

Email: muthukrishnan.saminathan@kiya.ai