Cyber Penetration Tester Senior

Baker Tilly; Gurugram District, Bengaluru; Hybrid; INR 1,500,000 - 2,500,000; Full time

Job summary

Baker Tilly One India is seeking a senior Cybersecurity Penetration Tester to join our Cybersecurity Consulting team. You will execute network and web app penetration tests using tools like Nessus, Nmap, Metasploit, and Burp Suite Pro, collaborating with teams to deliver secure client solutions.

Role requires hands-on testing experience, with OSCP/GPEN/OSWA/OSWE/ASCP/CASA certifications preferred, and strong knowledge of TCP/IP, OWASP Top 10, and cloud security testing in AWS/Azure/K8s

Qualifications

• Bachelor’s degree or equivalent experience in a relevant field.
• 2+ years in network-level testing and penetration testing.
• Experience in internal or external cybersecurity roles.
• Certifications such as OSCP/GPEN/OSWA/OSWE/ASCP/CASA are preferred.
• Hands-on with Burp Suite, Nessus, Kali Linux; cloud testing in AWS/Azure/K8s.

Responsibilities

• Network penetration testing with Nessus, Nmap, Metasploit.
• Web application testing including Burp Suite Pro.
• Test client apps and APIs to expose security weaknesses and ensure quality.
• Produce penetration testing reports based on results.
• Collaborate with team to ensure smooth testing workflows.
• Stay updated on testing tools and techniques.

Skills

TCP/IP networking

Penetration Testing

Burp Suite

Nessus

Metasploit

Kali Linux

Cloud security testing

APIs testing

Web application testing

OWASP Top 10

Education

Bachelor’s degree in related field or equivalent experience

OSCP

GPEN

OSWA

OSWE

ASCP

CASA

Tools

Burp Suite Pro

Nessus

Metasploit

Kali Linux

AWS

Azure

Kubernetes (K8s)

Job description

General Position Summary

At Baker Tilly One India, we champion authenticity. For us, that means fostering a culture of talented people who care about you, about our clients, and about our communities. Here, youll work towards our mission of empowering others to embrace opportunity, growing as a leader along the way. Our firms size, middle-market clients, customized career paths, and supportive culture make this a reality. Join a values-driven firm where youll have fun while solving complex and interesting business challenges. Welcome to the Cybersecurity Consulting team within Baker Tilly One Risk Advisory & Compliance (RAC). We are looking for a senior Cybersecurity Penetration Tester to join our team. Cybersecurity continues to be one of the most in-demand services around and our client’s business success is dependent on keeping their customer’s data secure. The Cybersecurity Penetration Tester will lend experience in executing the delivery of penetration tests with network and web application penetration testing.

Responsibilities

• Network penetration testing with tools such as Nessus, Nmap, Metasploit.
• Web application testing including advanced usage of Burp Suite Pro.
• TCP/IP networking and ability to troubleshoot connectivity issues.
• Test client's web and/or mobile applications and APIs to expose security weaknesses, being responsible for test quality and resolution of issues that may impede the test effort, for large or complex projects.
• Continuous learning by staying up to date on current testing tools and their applicability to a particular environment.
• Produce penetration testing reports based on testing results.
• Collaborate with program team members to ensure testing runs smoothly.
• Communicate effectively with the penetration testing team.

Qualifications

• Bachelor’s degree in business administration, cybersecurity, information technology, computer science or other related field or equivalent experience
• 2+ years of experience with TCP/IP networking and attacking endpoints at a network level.
• 2+ years of experience with the Penetration Testing
• 2+ years of experience in an internal or external cybersecurity role, or similar (e.g., threat/penetration testing, ethical hacking, OWASP top 10, AppScan)
• Collaborative and able to effectively communicate with a team.
• Desired Certifications: Offensive Security Certified Professional (OSCP), GPEN: GIAC Certified Penetration Tester, OffSec Web Assessor (OSWA), OffSec Web Expert (OSWE), API Security Certified Professional (ASCP), Certified API Security Analyst (CASA)
• Working knowledge of tools such as Burp Suite, Nessus, and the Kali Linux environment
• Experience with cloud penetration testing including K8S, AWS, and Azure
• Testing web applications, APIs, mobile applications, physical security, and social engineering (not all required, but multiple are expected)
• Experience with Dradis a plus and knowledge of vulnerabilities and exploits.