Penetration Tester

AppSecure Security; Delhi; Remote; INR 1,500,000 - 2,500,000; Full time

Job summary

AppSecure Security is seeking a seasoned Penetration Tester for a full-time remote role. You will perform assessments on web, mobile, and network environments, simulating real-world attacks to identify vulnerabilities and craft actionable remediation guidance.

The role emphasizes collaboration with engineering and security teams, documentation of risk ratings, and ongoing improvement of testing methods. Practical experience with Burp Suite, Metasploit, and other tools is valued.

Qualifications

• Experience in offensive security or bug bounty programs is beneficial.
• Strong understanding of security assessment methodologies and attacker mindset.
• Ability to translate technical findings for non-technical stakeholders.
• Ability to manage multiple engagements remotely and meet deadlines.

Responsibilities

• Plan and execute penetration tests on web, mobile, and network environments.
• Document vulnerabilities with risk ratings and remediation recommendations.
• Collaborate with engineering and security teams to validate fixes.
• Contribute to red teaming exercises and tooling development.

Skills

Application Security

Cybersecurity

Secure coding concepts

OWASP Top 10

Reverse Engineering

Malware Analysis

Red Teaming

Technical communication

Independent work

Education

Bachelor’s degree in Computer Science/Information Security or related field

Tools

Burp Suite

Metasploit

Nmap

Wireshark

Linux

Windows

Cloud platforms

Job description

Company Description

AppSecure Security delivers end-to-end security solutions designed to keep businesses safe from evolving digital threats. The company’s team includes highly skilled white hat hackers recognized by leading global platforms such as Meta, Paypal, Reddit, etc. AppSecure tests applications and networks from an attacker’s perspective, helping organizations identify and remediate vulnerabilities effectively. The company currently helps secure billions of online transactions and user data across Asia, supporting clients with both offensive security testing and practical remediation guidance.

Role Description

This is a full-time remote role for a Penetration Tester at AppSecure Security. The Penetration Tester will conduct security assessments on web, mobile, and network infrastructures, simulating real-world attacks to discover and document vulnerabilities. Daily responsibilities include planning and executing penetration tests, performing exploit development where necessary, and preparing clear reports with risk ratings and remediation recommendations. The role also involves collaborating with engineering and security teams to validate fixes, contributing to red teaming exercises, and staying current with emerging threats, tools, and techniques. The Penetration Tester will participate in continuous improvement of testing methodologies and may assist in developing internal security tools and automation.

Qualifications

• Candidates should possess strong Application Security and Cybersecurity skills, including secure coding concepts, common vulnerability classes (e.g., OWASP Top 10), and security assessment methodologies.
• Candidates should possess Reverse Engineering and Malware Analysis skills for dissecting binaries, understanding malicious behavior, and analyzing exploits or malware samples.
• Candidates should possess Red Teaming skills, including adversary simulation, lateral movement techniques, and realistic attack planning against complex environments.
• Candidates should possess practical experience with penetration testing tools and frameworks (e.g., Burp Suite, Metasploit, Nmap, Wireshark) and familiarity with Linux, Windows, and cloud platforms.
• Candidates should possess strong analytical and problem-solving abilities, clear written and verbal communication skills, and the capacity to explain technical findings to non-technical stakeholders.
• Candidates should possess the ability to work independently in a remote environment, manage multiple engagements, and meet deadlines with attention to detail and ethical conduct.
• Relevant certifications such as OSCP, OSCE, GPEN, or similar, and prior experience in offensive security or bug bounty programs are beneficial.
• A bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent practical experience, is preferred.