Penetration Tester

Michael Page; Hyderabad; Hybrid; INR 2,500,000 - 5,500,000; Full time

Job summary

Michael Page is seeking an experienced security professional in Hyderabad, India to lead offensive security engagements. The role covers testing complex web apps and APIs, bypassing authentication and WAF controls, and assessing enterprise/ecommerce platforms.

Ideal candidates have 8+ years of hands-on experience in penetration testing or vulnerability research, with a Bachelor's degree in Computer Science or Cybersecurity. Strong scripting and automation skills are essential.

Qualifications

• 8+ years of hands-on experience in offensive security, penetration testing, or vulnerability research.
• Bachelor's degree in Computer Science, Information Security, Cybersecurity, or equivalent practical field experience.

Responsibilities

• Web & API Exploitation: Testing complex web apps and services (REST, GraphQL, microservices), bypassing authentication, authorization, and WAF controls.
• Enterprise/Ecommerce solutions: Salesforce, Shopify, etc.
• Network Infrastructure: Assessing internal/external corporate networks and system configurations.
• Mobile & Client Security: Reverse engineering, dynamic binary analysis, and static analysis of mobile platforms and complex thick client applications.
• Multi-Cloud Penetration Testing: Exploiting IAM policies, serverless functions, and containerized architectures in Azure, GCP, AWS and Alicloud
• Active Directory & Network Infrastructure: Designing and executing internal infrastructure compromise pathways
• AI-Enabled Pentesting Capability: Utilizing AI-driven security tooling for automated script generation or secure code review
• Advanced Scripting & Exploit Dev: Proficient in Python, Go, Bash, or PowerShell to develop custom tooling

Skills

Offensive security

Penetration testing

Vulnerability research

Python

Go

Shell scripting

Cloud security

Education

Bachelor's degree in Computer Science or Cybersecurity

Job description

Role & responsibilities

• Web & API Exploitation: Testing complex web apps and services (REST, GraphQL, microservices), bypassing complex authentication, authorization, and WAF controls in modern web apps and APIs
• Enterprise/Ecommerce solutions: Salesforce (SFCC, SFMC), Shopify, etc.
• Network Infrastructure: Assessing internal/external corporate networks and system configurations.
• Mobile & Client Security: Reverse engineering, dynamic binary analysis, and static analysis of mobile platforms and complex thick client applications.
• Multi-Cloud Penetration Testing: Deep knowledge of exploiting IAM policies, serverless functions, and containerized architectures (Kubernetes/Docker) in Azure, GCP, AWS and Alicloud
• Active Directory & Network Infrastructure: Designing and executing internal infrastructure compromise pathways (Kerberoasting, AD CS abuse, lateral movement)
• AI-Enabled Pentesting Capability: Proven experience utilizing or building AI-driven security tooling (e.g., leveraging LLMs for automated script generation, secure code review, or creating agentic workflows to augment penetration testing capabilities)
• Advanced Scripting & Exploit Dev: High proficiency in Python, Go, Bash, or PowerShell to develop custom tooling, shellcode, and automated exploit flows

Preferred candidate profile

• Experience: 8+ years of dedicated, hands‑on experience in offensive security, penetration testing, or vulnerability research
• Education: Bachelors degree in computer science, Information Security, Cybersecurity, or equivalent practical field experience