Infra Penetration Testing @ Mumbai

Quess IT Staffing; Mumbai; On-site; INR 1,800,000 - 2,400,000; Full time

Job summary

Quess IT Staffing is seeking an Infra Penetration Tester in Navi Mumbai for a contract-to-hire arrangement. The role requires 3–8 years of hands-on experience in infrastructure penetration testing and proficiency with modern exploitation frameworks and security tooling.

You will perform network reconnaissance, AD security assessments, credential testing, and threat-informed testing across environments, with scripting for automation and PoC development.

Qualifications

• Min 3–8 years hands-on experience in infrastructure penetration testing.
• Experience with exploit frameworks and post-exploitation techniques.
• Ability to perform network reconnaissance and attack-surface mapping.
• AD security assessment including Kerberoasting and privilege escalation.
• Credential assessment and weak-password validation.
• Threat intel correlation and threat-informed testing.
• External exposure analysis and attack-path refinement.
• Scripting for PT automation and PoC development.
• Familiarity with standard PT methodologies (TTP mapping, adversary emulation).

Responsibilities

• Perform infrastructure penetration testing using Metasploit, Cobalt Strike and Kali Linux.
• Validate vulnerabilities with Tenable and Nessus; revalidate remediation.
• Map networks and identify exposed services using Nmap/Masscan/Shodan/Censys.
• Analyze Active Directory attack paths; Kerberoasting and privilege escalation.
• Audit credential security and password hygiene.
• Correlate threat intel and align with PT expectations.
• Coordinate purple team activities with SOC.
• Develop automated PoC scripts in Python/Bash/PowerShell.

Skills

Penetration testing

Red team exercises

Threat modeling

Adversary emulation

Safe PoC development

Scripting automation

Tools

Metasploit

Cobalt Strike

Kali Linux

Nessus

Tenable.io

Tenable.SC

Nmap

Masscan

Shodan

Censys

BloodHound

Impacket

Mimikatz

Rubeus

Hashcat

John the Ripper

Hydra

CrackMapExec

MISP

Recorded Future

Mandiant

ProjectDiscovery

Python

Bash

PowerShell

MITRE ATT&CK

PTES

OSSTMM

NIST SP 800-115

CVSS v3.1

EPSS

Job description

Position: Infra Penetration Testing

Location: Navi Mumbai

Duration: Contract to Hire

Job Description:

Experience: Min 3 - 8 years hands-on experience

Tech-Stack & Skills:

• Metasploit / Cobalt Strike / Kali Linux – infrastructure penetration testing, exploitation frameworks & post-exploitation techniques
• Tenable.io / Tenable.SC / Nessus – vulnerability validation, exploit confirmation & remediation revalidation scanning
• Nmap / Masscan / Shodan / Censys – network reconnaissance, service enumeration, exposed-service identification & attack-surface mapping
• Active Directory Security (BloodHound / Impacket / Mimikatz / Rubeus) – AD attack-path analysis, Kerberoasting & privilege escalation
• Password Auditing (Hashcat / John the Ripper / Hydra / CrackMapExec) – credential assessment & weak-password validation
• Threat Intelligence Platforms (MISP / Recorded Future / Mandiant) – exploit-intel correlation, advisory-driven PT & threat-informed testing
• Attack Surface Management (Mandiant ASM / Censys / ProjectDiscovery) – external exposure analysis & attack-path refinement
• Python / Bash / PowerShell – custom exploit scripting, PT automation & safe PoC development
• MITRE ATT&CK / PTES / OSSTMM / NIST SP 800-115 – TTP mapping, adversary emulation & structured PT methodology
• CVSS v3.1 / EPSS – risk-based finding prioritization, executive reporting & purple team coordination with SOC