Penetration Tester

Careernet; Hyderabad; Hybrid; INR 1,200,000 - 2,100,000; Full time

Job summary

Careernet is seeking an experienced Penetration Testing Engineer in Hyderabad. The role covers application, network, and infrastructure security testing with 5-7 years hands‑on experience.

You will perform security assessments, validate findings, and deliver detailed reports, working on-site with hybrid flexibility. The ideal candidate should have strong expertise in OWASP Top 10, SANS, CVSS, and in using Burp Suite, Nmap, Nessus, Metasploit, and Wireshark, along with scripting skills in Python,

Qualifications

• 5-7 years of experience in Penetration Testing / VAPT / Cyber Security.
• Strong hands‑on experience in Web/App, API, Network, and Infrastructure Penetration Testing.
• Good knowledge of OWASP Top 10, SANS, CVSS, and common vulnerabilities.
• Hands‑on experience with Burp Suite, Nmap, Nessus, Metasploit, Wireshark or similar tools.
• Strong understanding of TCP/IP, HTTP/HTTPS, DNS, VPN, Firewalls, Linux and Windows.
• Knowledge of scripting/programming languages such as Python, PowerShell, Bash.
• Strong analytical, troubleshooting, and report writing skills.

Responsibilities

• Perform Vulnerability Assessment and Penetration Testing (VAPT) across applications, APIs, networks, and infrastructure.
• Conduct Web Application, Mobile Application, API, Network, and Infrastructure Pentesting.
• Identify and exploit vulnerabilities using manual and automated testing techniques.
• Test based on OWASP Top 10 and industry-standard methodologies.
• Validate vulnerabilities and assess business security impact.
• Prepare detailed PT reports with findings, severity, evidence, and remediation recommendations.
• Collaborate with development and security teams to resolve findings; perform re-testing.

Skills

Penetration Testing

VAPT

Cyber Security

Web/App Testing

Network Testing

Infrastructure Testing

Python

PowerShell

Bash

Tools

Burp Suite

Nmap

Nessus

Metasploit

Wireshark

Job description

Job Title: Penetration Testing Engineer

Experience: 5-7 Years
Location: Hyderabad
Work Mode: On-site / Hybrid
Employment Type: Full-time

Job Summary

We are looking for an experienced Penetration Testing Engineer with 5-7 years of hands‑on experience in application, network, and infrastructure security testing. The candidate should have strong knowledge of identifying vulnerabilities, conducting penetration tests, validating security findings, and preparing detailed security assessment reports.

Key Responsibilities

• Perform Vulnerability Assessment and Penetration Testing (VAPT) across applications, APIs, networks, and infrastructure.
• Conduct Web Application, Mobile Application, API, Network, and Infrastructure Penetration Testing.
• Identify and exploit security vulnerabilities using manual and automated testing techniques.
• Perform security testing based on OWASP Top 10 and industry-standard methodologies.
• Validate vulnerabilities and assess their business/security impact.
• Use penetration testing tools such as Burp Suite, Nmap, Nessus, Metasploit, Wireshark, etc.
• Conduct vulnerability analysis, risk assessment, and remediation validation.
• Prepare detailed penetration testing reports with findings, severity, evidence, and remediation recommendations.
• Collaborate with development, infrastructure, and security teams to resolve identified vulnerabilities.
• Perform re-testing to validate remediation and closure of security findings.

Required Skills

• 5-7 years of experience in Penetration Testing / VAPT / Cyber Security.
• Strong hands‑on experience in Web Application, API, Network, and Infrastructure Penetration Testing.
• Good knowledge of OWASP Top 10, SANS, CVSS, and common security vulnerabilities.
• Hands‑on experience with Burp Suite, Nmap, Nessus, Metasploit, Wireshark or similar tools.
• Good understanding of TCP/IP, HTTP/HTTPS, DNS, VPN, Firewalls, Linux and Windows.
• Knowledge of scripting/programming languages such as Python, PowerShell, Bash, etc.
• Strong analytical, troubleshooting, and report‑writing skills.