Penetration Tester

AppSecure Security; Bhavnagar; Remote; INR 1,200,000 - 1,800,000; Full time

Job summary

AppSecure Security is seeking a remote Penetration Tester to conduct assessments on web, mobile, and network infra, simulating attacks to identify vulnerabilities. You will plan tests, develop exploits, and deliver actionable reports with risk ratings and remediation guidance.

You will collaborate with security teams, contribute to red teaming, and help improve testing methodologies while staying current with evolving threats and tools.

Qualifications

• Strong Application Security and Cybersecurity skills including secure coding concepts and OWASP Top 10.
• Reverse Engineering and Malware Analysis skills for dissecting binaries and exploits.
• Red Teaming skills including adversary simulation and lateral movement planning.
• Experience with penetration testing tools and frameworks and familiarity with Linux/Windows/cloud.
• Clear written and verbal communication; able to explain findings to non-technical stakeholders.
• Ability to work independently in a remote environment and manage multiple engagements.

Responsibilities

• Plan and execute penetration tests on web, mobile, and network targets.
• Develop exploits where necessary and document risk ratings and remediation suggestions.
• Collaborate with engineering and security teams to validate fixes and improvements.
• Contribute to red teaming exercises and stay current with threats and tooling.
• Help improve testing methodologies and assist in building internal security tools and automation.

Skills

Application Security

Cybersecurity

Secure Coding

OWASP Top 10

Red Teaming

Adversary Simulation

Threat Modeling

Education

Bachelor's degree in CS/InfoSec

Tools

Burp Suite

Metasploit

Nmap

Wireshark

Job description

Company Description

AppSecure Security delivers end-to-end security solutions designed to keep businesses safe from evolving digital threats. The company’s team includes highly skilled white hat hackers recognized by leading global platforms such as Meta, Paypal, Reddit, etc. AppSecure tests applications and networks from an attacker’s perspective, helping organizations identify and remediate vulnerabilities effectively. The company currently helps secure billions of online transactions and user data across Asia, supporting clients with both offensive security testing and practical remediation guidance.

Role Description

This is a full-time remote role for a Penetration Tester at AppSecure Security. The Penetration Tester will conduct security assessments on web, mobile, and network infrastructures, simulating real-world attacks to discover and document vulnerabilities. Daily responsibilities include planning and executing penetration tests, performing exploit development where necessary, and preparing clear reports with risk ratings and remediation recommendations. The role also involves collaborating with engineering and security teams to validate fixes, contributing to red teaming exercises, and staying current with emerging threats, tools, and techniques. The Penetration Tester will participate in continuous improvement of testing methodologies and may assist in developing internal security tools and automation.

Qualifications

• Candidates should possess strong Application Security and Cybersecurity skills, including secure coding concepts, common vulnerability classes (e.g., OWASP Top 10), and security assessment methodologies.
• Candidates should possess Reverse Engineering and Malware Analysis skills for dissecting binaries, understanding malicious behavior, and analyzing exploits or malware samples.
• Candidates should possess Red Teaming skills, including adversary simulation, lateral movement techniques, and realistic attack planning against complex environments.
• Candidates should possess practical experience with penetration testing tools and frameworks (e.g., Burp Suite, Metasploit, Nmap, Wireshark) and familiarity with Linux, Windows, and cloud platforms.
• Candidates should possess strong analytical and problem-solving abilities, clear written and verbal communication skills, and the capacity to explain technical findings to non-technical stakeholders.
• Candidates should possess the ability to work independently in a remote environment, manage multiple engagements, and meet deadlines with attention to detail and ethical conduct.
• Relevant certifications such as OSCP, OSCE, GPEN, or similar, and prior experience in offensive security or bug bounty programs are beneficial.
• A bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent practical experience, is preferred.