Penetration Tester (AEV)

BreachLock Inc.; Pune District; On-site; INR 900,000 - 2,100,000; Full time

Benefits offered by this job

Private Health Insurance

Job summary

BreachLock Inc. is a fast-growing cybersecurity company focused on modern, scalable, and continuous security testing solutions. We collaborate with Breach360 to validate findings and help clients interpret results across Web, Mobile, Infrastructure, and Cloud environments.

The role requires 3+ years of hands-on security testing experience, proficiency with industry tools, and a client-facing mindset to translate complex findings into practical remediation steps.

Qualifications

• Degree in Cybersecurity, Information Technology, Computer Science, or equivalent practical experience.
• 3+ years of experience in Penetration Testing, Red Teaming, Application Security, or Security Consulting.
• Strong hands-on experience with Web Applications, Infrastructure, Mobile Applications, APIs, and Vulnerability Assessments.
• Strong understanding of tools such as Kali Linux, Burp Suite, Nmap, Metasploit, and other security testing tools.
• Ability to validate automated security findings, identify false positives/negatives, and assess real-world exploitability and impact.

Responsibilities

• Work closely with Breach360, a security testing product, to validate and improve the quality, accuracy, and effectiveness of security assessment results.
• Review and validate vulnerabilities, attack paths, evidence, and recommendations generated by the product across Web, Mobile, Infrastructure, Cloud, and other environments.
• Work with clients to understand their environment and objectives, help them interpret Breach360 results, and ensure findings align with their security requirements.
• Benchmark Breach360's output across different assets, technologies, and scenarios to identify gaps, false positives/negatives, and opportunities for improvement.
• Collaborate with Engineering and Product teams to provide actionable feedback and help improve detection, attack coverage, prioritization, reporting, and overall product capabilities.
• Research new vulnerabilities and attack techniques and develop PoCs, scripts, test cases, or automation to improve the product.
• Recommend practical security testing and remediation approaches from a client and security practitioner perspective.

Skills

Penetration testing

Red Teaming

Application security

Security consulting

Education

Degree in Cybersecurity/IT/CS

Tools

Kali Linux

Burp Suite

Nmap

Metasploit

Job description

About BreachLock

BreachLock is a fast-growing cybersecurity company focused on modern, scalable, and continuous security testing solutions. We operate at the intersection of offensive security, automation, and cloud-native engineering—building systems that are both resilient and intelligent.

Description

• Work closely withBreach360, a security testing product, to validate and improve the quality, accuracy, and effectiveness of security assessment results.
• Review and validate vulnerabilities, attack paths, evidence, and recommendations generated by the product across Web, Mobile, Infrastructure, Cloud, and other environments.
• Work with clients to understand their environment and objectives, help them interpret Breach360 results, and ensure findings align with their expectations and security requirements.
• Benchmark Breach360's output across different assets, technologies, and scenarios to identify gaps, false positives/negatives, and opportunities for improvement.
• Collaborate with Engineering and Product teams to provide actionable feedback and help improve detection, attack coverage, prioritization, reporting, and overall product capabilities.
• Research new vulnerabilities and attack techniques and develop PoCs, scripts, test cases, or automation to improve the product.
• Recommend practical security testing and remediation approaches from aclient and security practitioner perspective.

• Degree in Cybersecurity, Information Technology, Computer Science, or equivalent practical experience.
• 3+ years of experience in Penetration Testing, Red Teaming, Application Security, or Security Consulting.
• Strong hands-on experience with Web Applications, Infrastructure, Mobile Applications, APIs, and Vulnerability Assessments.
• Strong understanding of tools such asKali Linux, Burp Suite, Nmap, Metasploit, and other security testing tools.
• Ability tovalidate automated security findings, identify false positives/negatives, and assess real-world exploitability and impact.
• Experience working withsecurity products, automation, or engineering teamsto improve testing capabilities and product output is a strong plus.
• Strong client-facing communication and ability to translate technical findings into practical recommendations.
• Strong analytical, troubleshooting, and research skills with a mindset for continuously improving security testing.
• Programming/scripting experience inPython, .NET, or similar languages.
• Preferred certifications:OSCP, OSCP+, CRTP.

• Private Health Insurance