Penetration Tester

Role: Penetration Tester

Experience: 2+ years

Location: Karol Bagh, New Delhi

Mode: Work from office (Alternate Saturdays working)

Budget: 7-10 LPA

CEH (Certified Ethical Hacker) — Mandatory.

Note : Post interview there will be a technical hands on lab round as well

Key Responsibilities

• Perform comprehensive penetration tests on web applications, APIs, mobile applications, networks, cloud platforms, and infrastructure components.

• Conduct vulnerability assessments, exploit validation, and security risk analysis.

• Simulate real-world attack scenarios to evaluate security posture.

• Prepare clear and detailed penetration testing reports, including proof-of-concepts, risk ratings, and remediation guidance.

• Collaborate with development, DevOps, and security teams to validate fixes and support remediation.

• Continuously research new vulnerabilities, exploit techniques, and security toolsets.

• Assist in improving internal methodologies, tools, and automation processes.

Required Qualifications

• Minimum 2 years of experience in penetration testing or offensive security roles.

• Strong understanding of OWASP Top 10, MITRE ATT&CK, common exploit techniques, and secure coding principles.

• Practical experience using tools such as Burp Suite, Metasploit, Nmap, Wireshark, Nessus, SQLMap, and Kali Linux toolset.

• Hands-on experience in manual testing, exploit development basics, and writing custom scripts (Python, Bash, or PowerShell).

• Ability to analyze system weaknesses and present findings clearly to technical and non-technical stakeholders.

Preferred Skills

• Experience with cloud platforms (AWS, Azure, GCP) offensive testing.

• Knowledge of Active Directory attacks and lateral movement techniques.

• Certifications such as OSCP, eJPT, eWPT, eCPPT are a plus.

• Exposure to CI/CD pipeline security and DevSecOps concepts.

Email - kirti.rustagi@siliconcomnet.com