Penetration Tester

Incedo Inc.; Gurugram District; On-site; INR 1,800,000 - 3,200,000; Full time

Job summary

Incedo Inc. in Gurugram seeks an experienced security professional to identify and exploit vulnerabilities across applications, APIs, networks, mobile, and cloud environments.

You will lead hands-on penetration testing efforts and mentor junior teammates. The role requires 5+ years in security testing, proficiency with Burp Suite, Kali Linux, Metasploit, scripting, and adherence to OWASP, NIST and MITRE ATT&CK frameworks.

Qualifications

• Hands-on penetration testing across apps, networks and cloud environments.
• Experience with vulnerability assessment and red team exercises.
• Familiarity with OWASP Top 10, SAST/DAST/ SCA tooling, and common web/mobile attack vectors.

Responsibilities

• Conduct penetration tests, simulate real-world attacks, document vulnerabilities and remediation steps.
• Mentor junior team members and share security knowledge with peers.

Skills

Penetration testing

Ethical hacking

Vulnerability assessment

Red team

Web security testing

API security testing

Network security testing

Mobile security testing

Cloud security testing

SAST

DAST

SCA

OWASP Top 10

SQL Injection

XSS

CSRF

Privilege Escalation

Python

Bash

PowerShell

Ruby

OWASP

NIST

MITRE ATT&CK

AWS

Azure

GCP

OSCP/CEH

Education

OSCP/CEH certs

Tools

Burp Suite

Kali Linux

Metasploit

Nmap

Job description

Location: Gurugram | Experience: 5+ Years

Role: Identify and exploit security vulnerabilities across applications, APIs, networks, mobile, and cloud environments.

Technical Skills (Must Have):

• Hands-on Penetration Testing, Ethical Hacking, Vulnerability Assessment, and Red Teaming.
• Web, API, Network, Mobile, and Cloud Security Testing.
• SAST, DAST, SCA, OWASP Top 10, SQL Injection, XSS, CSRF, and Privilege Escalation.
• Tools: Burp Suite, Kali Linux, Metasploit, and Nmap.
• Scripting: Python, Bash, PowerShell, or Ruby.
• Frameworks: OWASP, NIST, and MITRE ATT&CK.
• Cloud platforms: AWS, Azure, or GCP.
• Certification: OSCP, CEH, or equivalent preferred/required as per hiring criteria.

Key Responsibilities: Conduct penetration tests, simulate real-world attacks, document vulnerabilities, recommend remediation, and mentor junior team members.