Penetration Tester

Job Title:

Location:

Department:

Job Type:

Mode:

Job Summary:

Penetration Tester

Key Responsibilities:

• Conduct penetration tests on networks, web applications, APIs, mobile applications, and cloud environments
• Identify, exploit, and document vulnerabilities in a controlled and ethical manner
• Perform social engineering assessments (phishing, vishing, etc.), if applicable
• Create detailed reports with technical findings, risk ratings, and actionable recommendations
• Collaborate with DevOps, IT, and engineering teams to remediate discovered vulnerabilities
• Stay up to date on the latest security threats, tools, and techniques
• Assist in red teaming activities and threat simulations
• Contribute to security assessments during product development and deployment cycles
• Participate in security audits and compliance-related efforts (e.g., ISO 27001, SOC 2, PCI-DSS) as needed

Requirements:

• 3+ years of hands-on experience

  in penetration testing, ethical hacking, or red teaming
• Strong knowledge of penetration testing tools (e.g., Burp Suite, Nmap, Metasploit, Nessus, Wireshark)
• Familiarity with scripting or automation (Python, Bash, PowerShell, etc.)
• Experience with OWASP Top 10, MITRE ATT&CK framework, and CVSS scoring
• Solid understanding of networking protocols, operating systems (Windows/Linux), and web technologies
• Knowledge of secure coding practices and common vulnerabilities in modern applications
• Good reporting and communication skills; ability to translate complex technical issues to non-technical stakeholders

Preferred Qualifications:

• Relevant certifications such as OSCP, CEH, GPEN, or similar is preferred
• Experience testing in cloud environments (AWS, Azure, GCP)
• Familiarity with CI/CD pipeline security and DevSecOps concepts
• Experience with mobile application security testing (iOS/Android)

--

Kirti Rustagi

kirti.rustagi@raspl.com