Cyber Penetration Tester Senior

Baker Tilly US; Bengaluru; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

BTVK Advisory is seeking a skilled penetration tester in Bengaluru to perform network, web and API security assessments and deliver high-quality testing results. The role requires 2+ years in cybersecurity, familiarity with Nessus, Burp Suite Pro, and cloud penetration testing, with a focus on practical security testing across web, mobile, and API surfaces.

The candidate will work with a collaborative team, stay updated on tooling, and produce detailed reports.

Qualifications

• Bachelor’s degree in business administration, cybersecurity, information technology, computer science or other related field or equivalent experience
• 2+ years of experience with TCP/IP networking and attacking endpoints at a network level.
• 2+ years of experience with vulnerability scanning and Penetration Testing
• 2+ years of experience in an internal or external cybersecurity role, or similar (e.g., threat/penetration testing, ethical hacking, OWASP top 10, AppScan)
• Collaborative and able to effectively communicate with a team.
• Working knowledge of tools such as Burp Suite, Nessus, and the Kali Linux environment
• Experience with cloud penetration testing including K8S, AWS, and Azure
• Testing web applications, APIs, mobile applications, physical security, and social engineering (not all required, but multiple are expected)
• Experience with Dradis a plus and knowledge of vulnerabilities and exploits.

Responsibilities

• Network penetration testing with tools such as Nessus, Nmap, Metasploit.
• Web application testing including advanced usage of Burp Suite Pro.
• TCP/IP networking and ability to troubleshoot connectivity issues.
• Test client's web and/or mobile applications and APIs to expose security weaknesses, being responsible for test quality and resolution of issues that may impede the test effort, for large or complex projects.
• Continuous learning by staying up to date on current testing tools and their applicability to a particular environment.
• Produce penetration testing reports based on testing results.
• Collaborate with program team members to ensure testing runs smoothly.
• Communicate effectively with the penetration testing team.

Skills

TCP/IP networking

Vulnerability testing

Penetration testing

Team collaboration

Communication

Education

Bachelor’s degree in cybersecurity or related field

Equivalent experience

Tools

Burp Suite Pro

Nessus

Nmap

Metasploit

Kali Linux

Dradis

OWASP Top 10

AppScan

Job description

Overview

BTVK Advisory is a leading advisory firm whose specialized professionals guide clients through an ever-changing business world, helping them win now and anticipate tomorrow. BTVK Advisory, and its affiliated entities, have operations in North America, South America, Europe, Asia, and Australia. BTVK Advisory’s ultimate parent entity, Baker Tilly US, LLP, is an independent member of Baker Tilly International, a worldwide network of independent accounting and business advisory firms in 141 territories, with 43,000 professionals and a combined worldwide revenue of $5.2 billion.

Baker Tilly is an equal opportunity/affirmative action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability or protected veteran status, gender identity, sexual orientation, or any other legally protected basis, in accordance with applicable federal, state or local law.

Responsibilities

Job Description:

• Network penetration testing with tools such as Nessus, Nmap, Metasploit.
• Web application testing including advanced usage of Burp Suite Pro.
• TCP/IP networking and ability to troubleshoot connectivity issues.
• Test client's web and/or mobile applications and APIs to expose security weaknesses, being responsible for test quality and resolution of issues that may impede the test effort, for large or complex projects.
• Continuous learning by staying up to date on current testing tools and their applicability to a particular environment.
• Produce penetration testing reports based on testing results.
• Collaborate with program team members to ensure testing runs smoothly.
• Communicate effectively with the penetration testing team.

Qualifications

• Bachelor’s degree in business administration, cybersecurity, information technology, computer science or other related field or equivalent experience
• 2+ years of experience with TCP/IP networking and attacking endpoints at a network level.
• 2+ years of experience with vulnerability scanning and Penetration Testing
• 2+ years of experience in an internal or external cybersecurity role, or similar (e.g., threat/penetration testing, ethical hacking, OWASP top 10, AppScan)
• Collaborative and able to effectively communicate with a team.
• Desired Certifications: Offensive Security Certified Professional (OSCP), GPEN: GIAC Certified Penetration Tester, OffSec Web Assessor (OSWA), OffSec Web Expert (OSWE), API Security Certified Professional (ASCP), Certified API Security Analyst (CASA)
• Working knowledge of tools such as Burp Suite, Nessus, and the Kali Linux environment
• Experience with cloud penetration testing including K8S, AWS, and Azure
• Testing web applications, APIs, mobile applications, physical security, and social engineering (not all required, but multiple are expected)
• Experience with Dradis a plus and knowledge of vulnerabilities and exploits.