Penetration Tester

Dew Software; Bengaluru; Hybrid; INR 1,200,000 - 1,800,000; Full time

Job summary

Dew Software Bengaluru seeks an experienced penetration tester to assess security across web applications, APIs, mobile apps, networks, and cloud environments. You will identify vulnerabilities, conduct controlled exploits, and document risks with actionable remediation guidance.

The role requires hands-on testing, strong scripting basics in Python or similar, and the ability to communicate complex findings to technical and non-technical stakeholders.

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent practical experience.
• Strong understanding of networking, TCP/IP, Linux, Windows, and common security technologies.
• Hands-on knowledge of web application and API security, including OWASP Top 10.
• Experience with penetration testing tools such as Burp Suite, Nmap, Metasploit, Wireshark, and Kali Linux.
• Understanding of authentication, authorization, session management, encryption, and common application vulnerabilities.
• Basic scripting/programming skills in Python, Bash, PowerShell, or similar languages.
• Strong analytical, problem-solving, and documentation skills.
• Ability to communicate technical security findings clearly.

Responsibilities

• Perform penetration testing on web applications, APIs, mobile applications, networks, cloud environments, and infrastructure.
• Identify and exploit security vulnerabilities using manual testing and industry-standard tools.
• Conduct vulnerability assessments and validate security findings.
• Perform reconnaissance, enumeration, exploitation, privilege escalation, and post-exploitation activities within authorized environments.
• Assess vulnerabilities based on business impact and risk.
• Document findings with clear technical evidence, risk ratings, and remediation recommendations.
• Prepare detailed penetration testing reports for technical and non-technical stakeholders.
• Work with development, infrastructure, and security teams to validate remediation and perform retesting.
• Stay current with emerging vulnerabilities, attack techniques, security tools, and industry standards.
• Follow established penetration testing methodologies and security best practices.

Skills

Networking

TCP/IP

Linux

Windows

Security concepts

Web security

OWASP Top 10

Python scripting

Documentation

Communication

Education

Bachelor's degree / equivalent experience

Tools

Burp Suite

Nmap

Metasploit

Wireshark

Kali Linux

Job description

• Perform penetration testing on web applications, APIs, mobile applications, networks, cloud environments, and infrastructure.
• Identify and exploit security vulnerabilities using manual testing and industry-standard tools.
• Conduct vulnerability assessments and validate security findings.
• Perform reconnaissance, enumeration, exploitation, privilege escalation, and post-exploitation activities within authorized environments.
• Assess vulnerabilities based on business impact and risk.
• Document findings with clear technical evidence, risk ratings, and remediation recommendations.
• Prepare detailed penetration testing reports for technical and non-technical stakeholders.
• Work with development, infrastructure, and security teams to validate remediation and perform retesting.
• Stay current with emerging vulnerabilities, attack techniques, security tools, and industry standards.
• Follow established penetration testing methodologies and security best practices.

Required Skills & Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent practical experience.
• Strong understanding of networking, TCP/IP, Linux, Windows, and common security technologies.
• Hands‑on knowledge of web application and API security, including OWASP Top 10.
• Experience with penetration testing tools such as Burp Suite, Nmap, Metasploit, Wireshark, and Kali Linux.
• Understanding of authentication, authorization, session management, encryption, and common application vulnerabilities.
• Basic scripting/programming skills in Python, Bash, PowerShell, or similar languages.
• Strong analytical, problem-solving, and documentation skills.
• Ability to communicate technical security findings clearly.