Penetration Tester

CryptoMize; India; On-site; INR 800,000 - 1,200,000; Full time

Job summary

CryptoMize, headquartered in New Delhi, is seeking a Penetration Tester for a full-time, permanent role. You will lead authorized offensive-security engagements across client systems, including web and mobile apps, in a dynamic security practice.

Immediate joining is available, with rolling intake and compensation discussed at screening. Based at our New Delhi HQ, you will map attack surfaces, chain weaknesses, and demonstrate impact with controlled proof.

Qualifications

• Experience running commissioned test engagements from kickoff to close.
• Proficient in web app and mobile assessment techniques.
• Ability to produce engineer-readable security reports.

Responsibilities

• Run commissioned test engagements from kickoff to close: scope confirmation, test windows, communication protocol, and the daily check-ins clients on live systems require
• Attack web applications the way a real intruder would: map the attack surface, chain the weak points, and demonstrate impact with controlled proof — never destruction
• Test mobile builds on real devices: storage exposure, interception points, weak certificate pinning, and the trust decisions an app makes about its own server

Skills

Engagement management

Attack-surface mapping

Chained exploitation

Mobile assessment

Privilege-path probing

Engineer-readable reporting

Tools

Burp Suite Professional

Nmap

Metasploit Framework

Kali Linux toolchain

Job description

Penetration Tester jobs in Delhi at CryptoMize are open on a rolling, always-hiring basis — client demand for web, Android, and network pentesting runs continuously across our security practice, and we staff ahead of it. This is a full-time, permanent position with immediate joining, based at our New Delhi HQ, executing authorized offensive-security engagements for clients who need to know what a determined adversary would actually reach. Below is the complete posting: the responsibilities, the requirements, the seniority ladder, and the selection process. Testers whose findings developers thank them for should read to the end.

What you will actually do:

• Run commissioned test engagements from kickoff to close: scope confirmation, test windows, communication protocol, and the daily check-ins clients on live systems require
• Attack web applications the way a real intruder would: map the attack surface, chain the weak points, and demonstrate impact with controlled proof — never destruction
• Test mobile builds on real devices: storage exposure, interception points, weak certificate pinning, and the trust decisions an app makes about its own server

Skills that matter: Engagement management on live client systems, Attack-surface mapping before touching anything, Chained exploitation demonstrated with controlled proof, Mobile assessment on real devices, Internal privilege-path probing from a foothold, Engineer-readable reporting.

Tools you will use: Burp Suite Professional, Nmap, Metasploit Framework, Kali Linux toolchain.

Location: New Delhi (HQ), E4, Vasant Vihar. Type: full-time permanent. Availability: immediate, rolling intake. Compensation: discussed at screening. Apply: https://cryptomize.com/careers/job-openings/apply/