Cyber Penetration Tester

Alignity Solutions; Hyderabad; Hybrid; INR 1.000.000 - 1.500.000; Teilzeit

Zusammenfassung

Alignity Solutions in Hyderabad is seeking a Cyber Penetration Tester Consultant with 5-8 years of experience to assist in security testing and vulnerability analysis. The candidate will have a strong understanding of security weaknesses and provide actionable recommendations.

This role offers a hybrid work model and requires relevant industry certifications. Responsibilities include enhancing testing methodologies and preparing concise assessment reports for clients.

Qualifikationen

• 5-8 years of experience in penetration testing.
• Strong written and verbal communication skills.
• Ability to provide practical, risk-based recommendations.

Aufgaben

• Conduct security testing based on client requirements.
• Prepare high-quality assessment reports.
• Enhance penetration testing methodologies.
• Provide consultative guidance on vulnerabilities.
• Leverage automation and scripting for testing.

Kenntnisse

Manual Web Application Penetration Testing

Manual Mobile Application Penetration Testing

API / Web Services Penetration Testing

Network Penetration Testing

Thick Client Penetration Testing

Understanding of common vulnerabilities

Ausbildung

Relevant industry certifications such as OSCP, OSWE, OSEP, or equivalent

Tools

Security testing tools

Scripting/automation

Jobbeschreibung

Do you love a career where you Experience , Grow & Contribute at the same time, while earning at least 10% above the market? If so, we are excited to have bumped onto you.

Learn how we are redefining the meaning of work , and be a part of the team raved by Clients, Job-seekers and Employees.

If you are a Cyber Penetration TesterConsultant looking for excitement, challenge and stability in your work, then you would be glad to come across this page.

We are an IT Solutions Integrator/Consulting Firm helping our clients hire the right professional for an exciting long-term project. Here are a few details.

Check if you are up for maximizing your earning/growth potential, leveraging our Disruptive Talent Solution.

Work Mode: Hybrid

Experience:5-8 Years

Type: Contract to Hire

Responsibilities

• Assist in the technical scoping of security testing activities based on client requirements and architecture reviews.
• Conduct focused security research when not deployed on active engagements.
• Analyze and understand complex application, infrastructure, and solution architecture designs to identify security weaknesses.
• Provide consultative guidance to stakeholders on vulnerabilities identified, including clear and actionable remediation recommendations, both verbally and in writing.
• Prepare high-quality assessment reports with concise risk articulation and business-relevant recommendations.
• Enhance and update penetration testing methodologies, processes, playbooks, and standards documentation.
• Maintain technical proficiency through ongoing learning, certifications, and structured training paths.
• Effectively communicate the services, capabilities, and value proposition of the penetration testing team to internal and external stakeholders.
• Leverage automation and scripting, including AI-assisted and AI-integrated approaches, to improve testing efficiency and coverage.
• Support vulnerability research and exploit development activities using AI-enabled techniques where appropriate.
• Perform security testing for LLM-enabled applications and AI systems, including validation of common LLM-related risks and misuse scenarios.
• Lead and support technical scoping of penetration testing and offensive security activities based on business needs, architecture, and risk profile.
• Perform advanced manual penetration testing across Web Applications, Mobile Applications, Web Services / APIs, Network environments, and Thick Client applications.
• Assess complex application and infrastructure architectures to identify attack paths, design weaknesses, and security gaps.
• Validate vulnerabilities through hands-on testing and clearly distinguish exploitable findings from false positives.
• Provide consultative, risk-based guidance to clients and stakeholders on identified findings, including practical remediation recommendations in both verbal and written formats.
• Develop high-quality technical reports and executive-ready summaries that clearly articulate risk, business impact, and corrective actions.
• Conduct focused security research, vulnerability analysis, and exploit validation when not deployed on active engagements.
• Contribute to the enhancement of penetration testing methodologies, standards, playbooks, and internal processes.
• Maintain and expand technical proficiency through continuous learning, certifications, research, and training.
• Communicate team services and capabilities effectively to internal stakeholders and clients across global environments.
• Apply automation and scripting, including AI-assisted and AI-integrated techniques, to improve testing effectiveness and efficiency.
• Support emerging security testing areas such as AI-enabled applications, LLM security testing, and AI-assisted vulnerability research and exploit development.
• Manage multiple assignments concurrently, applying sound judgment to prioritize work, meet deadlines, and maintain quality.

Required Qualifications

• Proven experience in manual Web Application Penetration Testing.
• Proven experience in manual Mobile Application Penetration Testing.
• Hands‑on experience in API / Web Services Penetration Testing.
• Hands‑on experience in Network Penetration Testing.
• Hands‑on experience in Thick Client Penetration Testing.
• Strong understanding of common vulnerabilities, attack techniques, and remediation approaches across application and infrastructure security.
• Proficiency in analyzing complex architectures and identifying potential attack paths.
• Strong written and verbal communication skills, with the ability to explain technical findings to both technical and non‑technical stakeholders.
• Ability to provide practical, risk‑based, and actionable recommendations to clients.
• Experience with security testing tools, manual validation techniques, and scripting/automation to support testing activities.
• Experience with automation and scripting for penetration testing use cases.
• Experience with automation and scripting for penetration testing use cases.
• Exposure to AI-assisted security testing, AI-supported exploit research, or AI-integrated offensive security workflows.
• Experience in LLM security testing, prompt injection testing, model misuse scenarios, and security assessment of AI-enabled applications.
• Relevant industry certifications such as OSCP, OSWE, OSEP, GPEN, GWAPT, GMOB, eCPPT, or equivalent.
• Familiarity with secure development practices and remediation validation.
• Experience working in global delivery models and supporting diverse stakeholder groups.
• Strong written and verbal communication skills, including the ability to explain complex technical issues to varied audiences.
• Demonstrated experience working with diverse stakeholders, ideally in a global, multi‑national environment.
• Ability to manage concurrent initiatives with effective prioritization, sound judgment, and strong time management.

Preferred Qualifications

• Knowledge of or experience with OWASP Top 10.
• Knowledge of or experience with OWASP API Security Top 10.
• Knowledge of or experience with OWASP Thick Client Top 10.
• Knowledge of or experience with OWASP LLM Top 10.
• Knowledge of or experience with MITRE ATT&CK Framework.
• Experience in cloud service testing.
• Exposure to reverse engineering techniques.
• Familiarity with Static Application Security Testing (SAST).
• Familiarity with Dynamic Application Security Testing (DAST).
• Relevant certifications such as OSCP, OSWE, OSEP, GPEN, GWAPT, GMOB, eCPPT, or equivalent.
• Experience with AI-assisted testing workflows, security assessment of LLM-enabled applications, or modern offensive security automation approaches.