Penetration Tester 1 Year Experience Location WFH India

Diyar United Company; India; Híbrido; INR 450 000 - 800 000; Tempo integral

Resumo da oferta

Diyar United Company in India is seeking a Penetration Tester with around 1 year of hands-on experience in application security testing and external attack surface assessment. You will perform testing across web apps, APIs, and mobile apps, identify vulnerabilities, and contribute to risk-informed remediation.

The role emphasizes practical skills in Burp Suite, Nmap, OSINT, and reporting findings with clear remediation guidance. A strong communicator with documentation abilities will thrive.

Qualificações

• 1 year experience in penetration testing or application security.
• Knowledge of web, API, and mobile security concepts.

Responsabilidades

• Perform application penetration testing across web applications, APIs, and mobile applications.
• Identify vulnerabilities related to authentication, authorization, session management, input validation, business logic, data exposure, and misconfigurations.
• Assess applications against OWASP Top 10, API Security Top 10, and Mobile Security guidelines.
• Perform manual and tool-assisted testing using common security testing tools.
• Conduct OSINT and external attack surface assessments to identify assets.
• Validate identified vulnerabilities and determine potential impact.
• Prepare penetration testing reports with findings, risk ratings, and remediation recommendations.
• Perform retesting to verify remediation.
• Support senior team members during testing activities.

Conhecimentos

Penetration testing

Application security

Web security

API security

Mobile security

Burp Suite

Nmap

Reconnaissance tools

OSINT

Scripting (Python/Bash/PowerShell)

Documentation

Communication

Ferramentas

Burp Suite

Nmap

Descrição da oferta de emprego

Penetration Tester 1 Year Experience (Location: India)

We are looking for a Penetration Tester with around 1 year of hands-on experience in application security testing and external attack surface assessment.

Key Responsibilities

• Perform application penetration testing across web applications, APIs, and mobile applications.
• Identify security vulnerabilities related to authentication, authorization, session management, input validation, business logic, data exposure, and security misconfigurations.
• Assess applications against relevant security standards and methodologies such as the OWASP Top 10, OWASP API Security Top 10, and OWASP Mobile Security guidelines.
• Perform manual and tool-assisted penetration testing using commonly used security testing tools.
• Conduct OSINT and external attack surface assessments to identify internet-facing assets and publicly exposed information associated with the organization.
• Identify domains, subdomains, IP addresses, applications, services, and other externally exposed assets.
• Validate identified vulnerabilities and determine their potential security impact.
• Prepare clear penetration testing reports with findings, evidence, risk ratings, and remediation recommendations.
• Perform retesting to verify remediation of identified vulnerabilities.
• Support senior team members during penetration testing and security assessment activities.

Required Skills

• Around 1 year of experience in penetration testing or application security.
• Good understanding of web, API, and mobile application security concepts.
• Familiarity with common application security vulnerabilities and OWASP security risks.
• Hands-on experience with tools such as Burp Suite, Nmap, and other commonly used penetration testing and reconnaissance tools.
• Basic understanding of HTTP/HTTPS, REST APIs, authentication mechanisms, networking, and operating systems.
• Familiarity with OSINT, reconnaissance, and external attack surface discovery techniques.
• Basic scripting knowledge using Python, Bash, or PowerShell is an advantage.
• Good analytical, documentation, and communication skills.

Preferred

• Exposure to application security testing tools and methodologies across different platforms.
• Familiarity with Linux and common security testing environments.
• Relevant cybersecurity certifications or practical penetration testing training are advantageous but not mandatory (Example: OSCP, CRTP, BSCP (Burp Suite Certified Professional), eWAPT, eWAPTx etc)Role & responsibilities