Senior Penetration Tester (FinTech Security)

Senior Penetration Tester (FinTech Security)

Company: Hashorn System Pvt Ltd.

Location: Lucknow, Uttar Pradesh (Onsite)

Experience: 5+ years

Package: Competitive Salary (based on your experience and qualifications)

Employment Type: Full-time

⸻

About Hashorn

Hashorn is a fast-growing technology company. We focus on scalability, security, and innovation, and we’re looking for talented engineers who want to grow with us and make an impact.

⸻

Role Overview

We are seeking an experienced Senior Penetration Tester with deep expertise in financial technology (FinTech) platforms and high-security transactional systems. The ideal candidate will have a minimum of 5+ years of hands-on offensive security experience and be capable of identifying and exploiting vulnerabilities across payment systems, APIs, mobile banking applications, digital wallets, and cloud-based financial services.

This position requires an immediate joiner.

⸻

Key Responsibilities

• Conduct advanced penetration tests on FinTech applications, payment gateways, transaction processing systems, and backend infrastructures
• Assess security of mobile banking apps, digital wallet integrations, microservices, and financial APIs
• Perform transaction-level threat modeling, fraud simulation, and API-level abuse testing
• Execute network, web, mobile, and cloud penetration tests and develop PoCs for critical vulnerabilities
• Ensure alignment with PCI DSS, ISO 27001, PSD2, and relevant regulatory compliance
• Work closely with engineering, security, and DevSecOps teams to provide secure architecture recommendations
• Prepare both executive-level and technical reports with detailed remediation guidance
• Stay updated on financial sector threat vectors, fraud trends, and new exploitation techniques

⸻

Required Qualifications

• 5+ years of penetration testing/offensive security experience
• Proven experience working with FinTech, banking, or payment platforms
• Strong understanding of API security (OWASP API Top 10), tokenization, encryption, JWT security, and transaction integrity
• Hands-on experience with tools such as Burp Suite Pro, Nmap, Metasploit, Wireshark, MobSF, Frida, etc.
• Deep knowledge of OWASP Top 10, PTES methodology, MITRE ATT&CK, and secure coding principles
• Proficiency in scripting (Python, Bash, PowerShell) for automation and custom exploit development
• Experience with cloud security testing in AWS/Azure/GCP, especially in financial microservices architecture

⸻

Preferred Qualifications

• Industry-recognized certifications such as OSCP, OSWE, OSEP, CRTO, eCPPT, PNPT, or GPEN
• Practical understanding of KYC, AML, PCI-DSS, PSD2/Open Banking security requirements
• Familiarity with fraud detection bypass techniques and transaction replay/abuse scenarios
• Experience working with CI/CD security and secure mobile frameworks
• Previous experience in a regulated finance or banking environment

⸻

Soft Skills

• Strong analytical thinking with an attacker mindset
• Precise documentation and communication skills
• Ability to translate technical vulnerabilities into business risk impact
• Self-driven and able to work in fast-paced, compliance-heavy environments
• Ready to join immediately

⸻

Why Join Hashorn?

• Be part of a new and fast-growing tech company from the ground up.
• Opportunity to work on challenging cloud-native projects.
• Competitive salary and growth opportunities.
• A culture of ownership, learning, and innovation.

⸻

📩 Apply now by sending your resume to hr@hashorn.com