Cyber Penetration Tester Senior

BAKER TILLY ONE - INDIA LLP; Bengaluru; On-site; INR 1,200,000 - 2,000,000; Full time

Job summary

BAKER TILLY ONE - INDIA LLP in Bengaluru, India, seeks a Penetration Tester to perform network and web application security testing using Burp Suite, Nessus, and Kali Linux. You will identify vulnerabilities in web and mobile apps and APIs and produce detailed reports.

The role requires 2+ years in security testing, strong TCP/IP knowledge, and experience with cloud security testing (AWS/Azure). Collaboration and continuous learning are essential in this team.

Qualifications

• Bachelor’s degree in business administration, cybersecurity, information technology, computer science or related field or equivalent experience.
• 2+ years of TCP/IP networking experience.
• 2+ years of vulnerability scanning and penetration testing experience.
• 2+ years in an internal or external cybersecurity role, or similar.
• Collaborative and able to effectively communicate with a team.
• Desired certifications: OSCP, GPEN, OSWA, OSWE, ASCP, CASA.

Responsibilities

• Perform network penetration testing with tools like Nessus, Nmap, Metasploit.
• Test web applications using Burp Suite Pro and assess API security.
• Troubleshoot TCP/IP networking and connectivity issues.
• Test client web/mobile apps and APIs to identify security weaknesses and produce tests.
• Generate penetration testing reports with findings and remediation steps.
• Collaborate with program team to ensure testing runs smoothly.
• Communicate effectively with the penetration testing team.
• Maintain up-to-date knowledge on testing tools and vulnerabilities.

Skills

Team collaboration

Communication skills

Continuous learning

Education

Bachelor’s degree in business administration, cybersecurity, information technology, computer science or related field

Tools

Burp Suite

Nessus

Kali Linux

Dradis

AWS

Azure

Kubernetes (K8s)

Job description

OverviewBTVK Advisory is a leading advisory firm whose specialized professionals guide clients through an ever-changing business world, helping them win now and anticipate tomorrow. BTVK Advisory, and its affiliated entities, have operations in North America, South America, Europe, Asia, and Australia. BTVK Advisory’s ultimate parent entity, Baker Tilly US, LLP, is an independent member of Baker Tilly International, a worldwide network of independent accounting and business advisory firms in 141 territories, with 43,000 professionals and a combined worldwide revenue of $5.2 billion.Baker Tilly is an equal opportunity/affirmative action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability or protected veteran status, gender identity, sexual orientation, or any other legally protected basis, in accordance with applicable federal, state or local law.To be added to all ET through Experienced requisitions Any unsolicited resumes submitted through our website or to Baker Tilly Advisory Group, LP, employee e-mail accounts are considered property of Baker Tilly Advisory Group, LP, and are not subject to payment of agency fees. In order to be an authorized recruitment agency (\"search firm\") for Baker Tilly Advisory Group, LP, there must be a formal written agreement in place and the agency must be invited, by Baker Tilly's Talent Attraction team, to submit candidates for review via our applicant tracking system.Job Description:Responsibilities:Network penetration testing with tools such as Nessus, Nmap, Metasploit.Web application testing including advanced usage of Burp Suite Pro.TCP/IP networking and ability to troubleshoot connectivity issues.Test client's web and/or mobile applications and APIs to expose security weaknesses, being responsible for test quality and resolution of issues that may impede the test effort, for large or complex projects.Continuous learning by staying up to date on current testing tools and their applicability to a particular environment.Produce penetration testing reports based on testing results.Collaborate with program team members to ensure testing runs smoothly.Communicate effectively with the penetration testing team.Qualifications:Bachelor’s degree in business administration, cybersecurity, information technology, computer science or other related field or equivalent experience2+ years of experience with TCP/IP networking and attacking endpoints at a network level.2+ years of experience with vulnerability scanning and Penetration Testing2+ years of experience in an internal or external cybersecurity role, or similar (e.g., threat/penetration testing, ethical hacking, OWASP top 10, AppScan)Collaborative and able to effectively communicate with a team.Desired Certifications: Offensive Security Certified Professional (OSCP), GPEN: GIAC Certified Penetration Tester, OffSec Web Assessor (OSWA), OffSec Web Expert (OSWE), API Security Certified Professional (ASCP), Certified API Security Analyst (CASA)Working knowledge of tools such as Burp Suite, Nessus, and the Kali Linux environmentExperience with cloud penetration testing including K8S, AWS, and AzureTesting web applications, APIs, mobile applications, physical security, and social engineering (not all required, but multiple are expected)Experience with Dradis a plus and knowledge of vulnerabilities and exploits.