Penetration Tester

SourcingXPress; Bengaluru; On-site; INR 1,000,000 - 1,800,000; Full time

Job summary

Deep Armor in Bengaluru seeks an experienced Penetration Tester to join our security team. You will lead full-scope offensive security engagements across web and mobile apps, APIs, AI agents, networks, and cloud environments (AWS/Azure).

You will manually exploit vulnerabilities, generate actionable reports, and collaborate with development teams to validate fixes, while building automation scripts in Python, Go, or Bash.

Qualifications

• 2+ years of offensive security / ethical hacking experience.
• Strong knowledge of the OWASP Top 10 and AD attack paths.
• Experience with Burp Suite Pro, Metasploit, Nmap, and Cobalt Strike.
• OSCP preferred; OSWE, OSEP or CRTO considered advantageous.

Responsibilities

• Conduct full-scope security assessments on web and mobile apps, APIs, AI agents, networks and cloud infrastructure.
• Manually exploit vulnerabilities to demonstrate real business impact beyond automated scans.
• Produce clear, actionable reports and guide remediation with development teams.
• Develop and maintain scripts to automate testing workflows (Python/Go/Bash).

Skills

Penetration testing

Technical writing

Offensive security

Education

OSCP

OSWE

OSEP

CRTO

Tools

Burp Suite Pro

Metasploit

Nmap

Cobalt Strike

Job description

Company: Deep Armor

Website: Visit Website

LinkedIn: Visit LinkedIn

Business Type: Startup

Company Type: Product & Service

Business Model: B2B

Funding Stage: Seed

Industry: security

Salary Range: ₹ 10-18 Lacs PA

Job Description

Penetration Tester (Offensive Security)

About The Role

We're looking for an experienced Penetration Tester to join our security team, focused on full-scope offensive security engagements across web/mobile applications, APIs, AI agents, networks, and cloud environments (AWS/Azure).

Core Responsibilities

• Full-Scope Penetration Testing — Conduct manual and automated security assessments on web and mobile applications, APIs, AI agent systems, internal/external networks, and cloud infrastructure (AWS/Azure)
• Exploitation & Risk Analysis — Manually exploit identified vulnerabilities to demonstrate real-world business impact, going beyond automated scan results
• Reporting & Remediation — Author clear, actionable technical reports and partner directly with development teams to guide and validate fix implementation
• Tooling & Automation — Build and maintain custom scripts (Python, Go, or Bash) to automate testing workflows and bypass modern security defenses
  
  

Must-Have Qualifications

• Experience: 2+ years of dedicated professional experience in offensive security / ethical hacking
• Technical Expertise: Strong working knowledge of the OWASP Top 10, Active Directory attack paths, and industry-standard tooling (Burp Suite Pro, Metasploit, Nmap, Cobalt Strike)
• Certifications: OSCP preferred; equivalent certifications (OSWE, OSEP, CRTO) considered a strong plus
• Communication: Excellent technical writing skills, with the ability to translate complex vulnerabilities into business risk for non-technical stakeholders