Penetration Tester

Penetration Tester - Retest & QA Team, Remote (India)

Our core values are:

• Bring Order to Chaos
• Be Accountable & See it Through
• 1000% With You
• Support & Collaborate
• Think Outside the Box

Summary:

Essential

• Perform vulnerability retesting for client engagements, confirming remediation and validating fixes.
• Conduct QA reviews of penetration testing reports to ensure technical accuracy, consistent formatting and clear remediation guidance.
• Configure and run penetration testing tools and scripts to validate findings.
• Collaborate with testers to verify exploit chains and provide feedback to strengthen overall report quality.
• Contribute to continuous improvement of internal methodologies, tooling and reporting standards.
• Support development and refinement of proof-of-concept (PoC) examples for recurring vulnerabilities.
• Participate in internal syncs and cross-team reviews to promote testing consistency and operational efficiency.
• Communicate directly with clients about their remediation efforts and vulnerability risk.

Work Skills and Qualifications:

• Experience Level: 1 to 4 years
• Solid understanding of networks, web/mobile applications, and common security vulnerabilities (e.g., OWASP Top 10, CVEs).
• Experience with one or more scripting languages (Python, Bash, PowerShell, or similar).
• Familiarity with front-end frameworks (AngularJS, React, Bootstrap, etc.).
• Experience testing web-based APIs (REST, SOAP, XML, JSON).
• Understanding of web application development and/or source code review.
• Strong knowledge of common vulnerabilities: XSS, XXE, SQL Injection, Deserialization, File Inclusion/Path Traversal, SSRF, RCE, authentication flaws, and configuration issues.
• Ability to craft clear, actionable remediation guidance.
• Strong written and verbal communication skills and able to translate technical findings into business-relevant insight.
• Comfortable working independently and collaboratively across teams.
• Maintain confidentiality and handle client data responsibly.
• Obtain or maintain at least one intermediate certification (OSCP, GPEN, CRTO, etc.)

NOTE