Cybersecurity Analyst (Internal Penetration Testing)

Johnson Electric Group; Chennai; On-site; INR 900,000 - 1,400,000; Full time

Job summary

Johnson Electric Group seeks an cybersecurity professional to lead offensive security activities, including penetration testing, Red Team exercises, and tooling development. The role focuses on identifying vulnerabilities across infrastructure, applications, networks, cloud and AD, while building automation to scale testing capabilities.

The candidate will collaborate with SOC and IT teams, document findings with actionable remediation guidance, and continuously improve methodologies and tooling

Qualifications

• Bachelor's degree in computer science, cybersecurity or a relevant field.
• Initial professional experience in cybersecurity, penetration testing or offensive security is preferred; motivated early-career candidates with strong practical experience are encouraged to apply.
• Strong fundamentals in networking, Windows, Linux and Active Directory.
• Hands-on experience with penetration testing and offensive security tools.
• Strong scripting or programming skills using Python, PowerShell, Bash or similar languages.

Responsibilities

• Develop, implement and maintain penetration testing, Red Team and offensive security tools for global cybersecurity operations.
• Conduct internal and external penetration tests across infrastructure, applications, networks, cloud and Active Directory environments.
• Develop scripts, automation, frameworks and internal tools to improve efficiency and scalability of penetration testing activities.
• Conduct proactive Red Team exercises to simulate real-world external adversaries and insider threats.
• Identify vulnerabilities, attack paths and weaknesses in organizational security controls.
• Perform security assessments of third-party services, applications and software.
• Conduct source-code reviews to identify security vulnerabilities and insecure coding practices.
• Develop internal security tools, scripts and automation to improve offensive security capabilities.

Skills

Penetration testing

Red Team

Python scripting

PowerShell

Bash

Security research

Education

Bachelor's degree in computer science or cybersecurity

Job description

Responsibilities:

• Develop, implement and maintain penetration testing, Red Team and offensive security tools for global cybersecurity operations.


• Conduct internal and external penetration tests across infrastructure, applications, networks, cloud and Active Directory environments.


• Develop scripts, automation, frameworks and internal tools to improve the efficiency and scalability of penetration testing activities.


• Conduct proactive Red Team exercises to simulate real-world external adversaries and insider threats.


• Identify vulnerabilities, attack paths and weaknesses in organizational security controls.


• Perform security assessments of third-party services, applications and software.


• Conduct source-code reviews to identify security vulnerabilities and insecure coding practices.


• Develop internal security tools, scripts and automation to improve offensive security capabilities.


• Research new vulnerabilities, attack techniques, tools and exploitation methods.


• Develop proof-of-concepts and exploits to validate vulnerabilities and demonstrate their potential impact.


• Collaborate with the SOC on Purple Team exercises to test and improve detection and response capabilities.


• Document findings in clear, risk-based reports with technical evidence, business impact and actionable remediation guidance.


• Present security findings to both technical and non-technical stakeholders.


• Work with infrastructure, application and IT teams to validate and remediate identified vulnerabilities.


• Evaluate and implement new offensive security tools and technologies to improve the organization's global testing capabilities.


• Continuously improve penetration testing and Red Team methodologies, tooling and capabilities.


• Support the development of the organization's internal offensive security capabilities.

Requirements:

• Bachelor's degree in computer science, cybersecurity or a relevant field, or equivalent practical experience.


• Initial professional experience in cybersecurity, penetration testing or offensive security is preferred; motivated early-career candidates with strong practical experience are encouraged to apply.


• Passionate about CTFs, vulnerability research, exploit development, or simply \"breaking things\" to understand how they work.


• Strong fundamentals in networking, Windows, Linux and Active Directory.


• Good understanding of common offensive security techniques and attack methodologies.


• Hands-on experience with penetration testing and offensive security tools.


• Ability to understand, reproduce and exploit security vulnerabilities.


• Experience developing security tools, automation, scripts or proof-of-concepts is highly desirable.


• Strong scripting or programming skills using Python, PowerShell, Bash or similar languages.


• Demonstrated interest in offensive security through CTFs, personal projects, GitHub projects, vulnerability research or security communities.


• Strong analytical and problem-solving skills, with a creative approach to identifying attack paths.


• Good communication and technical writing skills, with the ability to explain complex security findings clearly.


• Curiosity, autonomy and a strong willingness to continuously learn and research new attack techniques.


• Experience with web application/API security, cloud security or source-code review is a plus.


• Knowledge of OT/ICS security and industrial environments is a plus.


• Fluent English is required.


• Certifications such as OSCP, PNPT, CRTO or equivalent are a plus.