Penetration Tester (AEV)

BreachLock; Pune District; On-site; INR 1,200,000 - 2,400,000; Full time

Benefits offered by this job

Private Health Insurance

Job summary

BreachLock in Pune, India, is seeking an experienced Penetration Tester to join our cybersecurity team. You will work with Breach360 to validate findings across Web, Mobile, Infrastructure, and Cloud environments.

You will review vulnerabilities, develop PoCs, and communicate actionable recommendations to clients. The role requires 3+ years of hands-on testing, strong scripting, and comfort translating complex results for technical and non-technical stakeholders.

Qualifications

• 3+ years of experience in penetration testing or related fields.
• Strong hands-on experience with Web applications, Infrastructure, Mobile applications, APIs, and vulnerability assessments.
• Experience with security testing tools and methodologies.
• Ability to validate automated security findings and assess exploitability.
• Strong client-facing communication and ability to translate technical findings into actionable recommendations.

Responsibilities

• Work closely with Breach360 to validate and improve security assessment results.
• Review and validate vulnerabilities, attack paths, evidence, and recommendations across environments.
• Interpret Breach360 results for clients and ensure findings meet security requirements.
• Benchmark outputs to identify gaps, false positives/negatives, and improvement opportunities.
• Collaborate with Engineering and Product teams to improve detection, reporting, and product capabilities.
• Research new vulnerabilities and develop PoCs, scripts, or automation to enhance the product.

Skills

Penetration testing

Red Teaming

Application security

Security consulting

Client communication

Programming/scripting

Education

Bachelor's degree in Cybersecurity/IT/Computer Science

Tools

Kali Linux

Burp Suite

Nmap

Metasploit

Job description

About BreachLock

BreachLock is a fast-growing cybersecurity company focused on modern, scalable, and continuous security testing solutions. We operate at the intersection of offensive security, automation, and cloud-native engineering—building systems that are both resilient and intelligent.

Description

• Work closely withBreach360, a security testing product, to validate and improve the quality, accuracy, and effectiveness of security assessment results.
• Review and validate vulnerabilities, attack paths, evidence, and recommendations generated by the product across Web, Mobile, Infrastructure, Cloud, and other environments.
• Work with clients to understand their environment and objectives, help them interpret Breach360 results, and ensure findings align with their expectations and security requirements.
• Benchmark Breach360's output across different assets, technologies, and scenarios to identify gaps, false positives/negatives, and opportunities for improvement.
• Collaborate with Engineering and Product teams to provide actionable feedback and help improve detection, attack coverage, prioritization, reporting, and overall product capabilities.
• Research new vulnerabilities and attack techniques and develop PoCs, scripts, test cases, or automation to improve the product.
• Recommend practical security testing and remediation approaches from aclient and security practitioner perspective.

• Degree in Cybersecurity, Information Technology, Computer Science, or equivalent practical experience.
• 3+ years of experience in Penetration Testing, Red Teaming, Application Security, or Security Consulting.
• Strong hands-on experience with Web Applications, Infrastructure, Mobile Applications, APIs, and Vulnerability Assessments.
• Strong understanding of tools such asKali Linux, Burp Suite, Nmap, Metasploit, and other security testing tools.
• Ability tovalidate automated security findings, identify false positives/negatives, and assess real-world exploitability and impact.
• Experience working withsecurity products, automation, or engineering teamsto improve testing capabilities and product output is a strong plus.
• Strong client-facing communication and ability to translate technical findings into practical recommendations.
• Strong analytical, troubleshooting, and research skills with a mindset for continuously improving security testing.
• Programming/scripting experience inPython, .NET, or similar languages.
• Preferred certifications:OSCP, OSCP+, CRTP.

• Private Health Insurance