Pen tester Engineer

Infosys; Hyderabad; On-site; INR 1,000,000 - 1,700,000; Full time

Job summary

Infosys in Hyderabad is seeking an experienced penetration tester to assess security of client applications and perform comprehensive testing using Burp Suite, Metasploit, Kali Linux and Nessus. You will document vulnerabilities with clear reproduction steps and impacts, and provide actionable remediation guidance to development teams.

The role requires keeping abreast of evolving threats and testing methodologies, conducting demos with application teams, and performing retests to verify

Qualifications

• Experience in comprehensive penetration testing and security assessments.
• Ability to document vulnerabilities with steps and impacts.
• Stays updated with latest threats and testing methods.

Responsibilities

• Schedule and conduct demo sessions with application teams to understand functionality and architecture.
• Perform comprehensive penetration tests using industry-standard practices.
• Document and report vulnerabilities with reproduction steps and impacts.
• Provide remediation recommendations to development teams.
• Conduct retests to verify vulnerability remediation.
• Stay updated with latest security threats and testing methodologies.
• Utilize tools including Burp Suite, Metasploit, Kali Linux, Nessus and other relevant hacking tools.

Skills

Application Security

Penetration Testing

Tools

Burp Suite

Metasploit

Kali Linux

Nessus

Job description

• Primary skills:Technology->Application Security->Penetration Testing (Black,White,Grey Box Testing)
• Schedule and conduct demo sessions with application teams to understand the functionality and architecture of target applications
• Perform comprehensive penetration tests, adhering to industry-standard best practices for each test
• Utilize a variety of tools including Burp Suite, Metasploit, Kali Linux, Nessus, and other relevant hacking tools
• Document and report vulnerabilities, including detailed explanations, reproduction steps, and potential impacts
• Provide clear and actionable recommendations for remediation to development teams
• Conduct retests to verify the successful resolution of identified vulnerabilities
• Stay updated with the latest security threats and testing methodologies