Penetration Tester

Role Overview

Tester Engineer

Role & responsibilities

• Perform

  Web, API, Cloud, and Network penetration testing

  across FinTech infrastructures.
• Conduct

  Red Team & adversary simulations

  (phishing, lateral movement, privilege escalation, persistence).
• Execute

  cloud security assessments

  with focus on

  PCI DSS, SOC 2, ISO 27001

  .
• Research, develop, and use

  custom exploits, scripts, and payloads

  .
• Identify vulnerabilities, prepare

  exploit PoCs

  , and advise on remediation.
• Deliver

  executive-level security reports

  and detailed technical findings.
• Stay ahead of

  new exploits, malware tactics, and FinTech-specific attack surfaces

  .

Preferred candidate profile

Penetration Testing Tools:

• Web & API:

  Burp Suite Pro, OWASP ZAP, Postman, sqlmap

• Network:

  Nmap, Nessus, OpenVAS, Hydra, CrackMapExec

• Exploitation:

  Metasploit, Cobalt Strike, Empire, Covenant

• AD/Windows:

  BloodHound, Mimikatz, Rubeus, PowerView, SharpHound

• Forensics/Monitoring:

  Wireshark, tcpdump, Zeek, Suricata

Scripting & Programming:

• Python, Bash, PowerShell (for exploit scripting & automation).

Qualifications

• Education: B.E/B.Tech/MCA or equivalent in Computer Science / IT / Cybersecurity.

• Experience:

  2-3 year (Internship or project experience in cybersecurity is a plus).

Certifications (Mandatory / Preferred):

• OSCP, OSWE, OSEP, CRTO, GPEN, CEH (Practical), eJPTv2.
• CEH (EC-Council), eJPT (INE), CompTIA Security+ Preferred.