Ethical Hacker

Training Basket; Dadri; On-site; INR 600,000 - 900,000; Full time

Job summary

Training Basket seeks a skilled penetration tester to perform authorized assessments across networks, web apps, and infrastructure. You will identify vulnerabilities, validate risk exposure, and deliver actionable remediation guidance in line with OWASP and security best practices.

The role requires hands-on use of Nmap, Burp Suite, Nessus, Metasploit, Wireshark, and related tools, plus scripting skills for reporting and automation. Applicants should stay current with threat trends.

Qualifications

• Strong knowledge of Ethical Hacking and Cybersecurity Fundamentals.
• Understanding of TCP/IP, DNS, HTTP, HTTPS, SSH, and FTP protocols.
• Hands-on knowledge of Kali Linux, Windows, and Linux operating systems.
• Familiarity with penetration testing tools such as Nmap, Burp Suite, Wireshark, Metasploit, and Nessus.
• Knowledge of OWASP Top 10 vulnerabilities.
• Understanding of SQL Injection, Cross-Site Scripting (XSS), CSRF, and authentication vulnerabilities.
• Knowledge of vulnerability scanning and security assessment techniques.
• Understanding of firewalls, IDS/IPS, VPNs, and network security.
• Basic scripting knowledge in Python, Bash, or PowerShell.
• Knowledge of penetration testing methodologies and security reporting.

Responsibilities

• Conduct authorized penetration testing on networks, web applications, systems, and infrastructure.
• Identify security vulnerabilities, threats, and potential risks.
• Perform Vulnerability Assessment and Penetration Testing (VAPT).
• Assess network security, firewalls, servers, and operating systems.
• Conduct web application security testing based on OWASP guidelines.
• Use ethical hacking tools to identify and validate security weaknesses.
• Prepare detailed vulnerability assessment reports with remediation recommendations.
• Collaborate with IT and security teams to resolve identified vulnerabilities.
• Perform security audits and risk assessments.
• Stay updated with emerging cybersecurity threats, attack techniques, and security trends.
• Support incident investigation and security monitoring activities.
• Ensure all security testing follows approved scope, legal requirements, and organizational policies

Skills

Ethical hacking fundamentals

Network protocols TCP/IP DNS HTTPHTTPS

Kali Linux Windows Linux

Penetration testing tools Nmap Burp Wi

OWASP Top 10

Web app security vulnerabilities SQLiX

Vulnerability assessment techniques

Firewalls IDS/IPS VPNs

Scripting Python Bash PowerShell

Security reporting methodologies

Tools

Nmap

Burp Suite

Wireshark

Metasploit

Nessus

Job description

• Conduct authorized penetration testing on networks, web applications, systems, and infrastructure.
• Identify security vulnerabilities, threats, and potential risks.
• Perform Vulnerability Assessment and Penetration Testing (VAPT).
• Assess network security, firewalls, servers, and operating systems.
• Conduct web application security testing based on OWASP guidelines.
• Use ethical hacking tools to identify and validate security weaknesses.
• Prepare detailed vulnerability assessment reports with remediation recommendations.
• Collaborate with IT and security teams to resolve identified vulnerabilities.
• Perform security audits and risk assessments.
• Stay updated with emerging cybersecurity threats, attack techniques, and security trends.
• Support incident investigation and security monitoring activities.
• Ensure all security testing follows approved scope, legal requirements, and organizational policies

Requirements

• Strong knowledge of Ethical Hacking and Cybersecurity Fundamentals .
• Understanding of network protocols such as TCP/IP, DNS, HTTP, HTTPS, SSH, and FTP.
• Hands-on knowledge of Kali Linux, Windows, and Linux operating systems.
• Familiarity with penetration testing tools such as Nmap, Burp Suite, Wireshark, Metasploit, and Nessus.
• Knowledge of OWASP Top 10 vulnerabilities.
• Understanding of SQL Injection, Cross-Site Scripting (XSS), CSRF, and authentication vulnerabilities.
• Knowledge of vulnerability scanning and security assessment techniques.
• Understanding of firewalls, IDS/IPS, VPNs, and network security.
• Basic scripting knowledge in Python, Bash, or PowerShell.
• Knowledge of penetration testing methodologies and security reporting.