Cyber Penetration Tester

TymblHub; Hyderabad; On-site; INR 800,000 - 1,400,000; Full time

Job summary

TymblHub in Hyderabad is seeking a Cyber Penetration Tester with hands-on expertise to identify and secure applications, networks and systems. You will work in a challenging environment requiring deep technical knowledge and practical exploitation skills.

Ideal candidates have experience across web and network testing, vulnerability assessment, and a solid grasp of APIs, cloud security and infrastructure security. Strong hands-on tooling and issue remediation mindset are essential.

Qualifications

• Hands-on cyber penetration testing across applications, networks and systems.
• Proficient with Burp Suite, Metasploit, Nmap, Nessus and Wireshark.
• Familiar with OWASP Top 10 and SANS Top 25 exploit lists.

Responsibilities

• Identify vulnerabilities and security flaws and advise on remediation.
• Perform vulnerability assessments, exploit research and testing.
• Collaborate with engineers to secure APIs, cloud and infra environments.

Skills

Penetration testing

Vulnerability assessment

Cloud security

APIs security

Network security

Tools

Burp Suite

Metasploit

Nmap

Wireshark

Nessus

Job description

# Cyber Penetration TesterCloudxtremeCPosted on October 5, 2026---Experience2 - 4 yrsJob LocationHyderabad, IndiaVacancy1DesignationPenetration TesterJob TypeNot specified---## Job Description**Role & responsibilities**We are looking for **Cyber Penetration Testers** with strong hands-on expertise in identifying vulnerabilities and securing applications, networks, and systems. The role requires **deep technical knowledge** and the ability to work in complex environments.**Key Skills Required*** Web & Network Penetration Testing* Vulnerability Assessment & Exploitation* OWASP Top 10, SANS Top 25* Tools: Burp Suite, Metasploit, Nmap, Wireshark, Nessus* Experience in identifying and exploiting security flaws* Knowledge of authentication, authorization, and session management vulnerabilities* Strong understanding of APIs, cloud security, and infrastructure security