Penetration Tester II

Astra Security Inc; Bengaluru; On-site; INR 1,000,000 - 1,500,000; Full time

Benefits offered by this job

Health insurance cover for you and your spouse

Workcations to locations like Chikmagalur & Jim Corbett

Collaborative team atmosphere with startup energy

Job summary

A cybersecurity firm in Bengaluru seeks a Penetration Tester II to perform advanced penetration tests and contribute to enhancing security systems. You'll work directly with customers to fix vulnerabilities while gaining valuable hands-on experience in offensive security. The ideal candidate has an OSCP or CREST certification and 3-5 years of experience in pentesting across various platforms. Enjoy a supportive environment with health coverage and engaging team experiences.

Qualifications

• Must have OSCP or CREST certification.
• 3-5 years of experience in pentesting various assets.
• Skilled in both Black Box and White Box testing.

Responsibilities

• Perform pentests on customer applications using AI-driven platform.
• Conduct VA/PT for various applications and infrastructure.
• Interact with customers to discuss remediation steps.

Skills

OSCP or CREST certified

3-5 years of professional experience in pentesting

Comfortable in Black Box and White Box testing

Experience with customer interactions

Ability to understand code in a programming language

Job description

Job Description

Ever dreamed of legally hacking into systems to make them stronger? We're looking for a Penetration Tester II to join our security‑obsessed crew at Astra. If you're the kind of person who’s curious about how systems can be broken (and loves the challenge of fixing them), this is your opportunity to turn that curiosity into real‑world impact.

You’ll get hands‑on experience with offensive security, collaborate with top minds in the space, and play a vital role in making the internet safer. This is where curiosity meets impact.

At Astra you will be:

Responsibilities

• Performing hacker‑style pentests on customer applications and managing the entire pentest using our AI‑driven platform.
• Carrying out VA/PT for web apps, mobile apps, cloud infrastructure, SaaS apps, network devices, and open‑source projects.
• Contributing to building intelligence for our DAST scanner.
• Interacting with customers over remediation calls.
• Facilitating clients to map out steps for fixing vulnerabilities.
• Maintaining our vulnerability management system.

Qualifications

• OSCP or CREST certified.
• 3‑5 years of professional experience in pentesting on multiple assets, including web applications, cloud infrastructure, etc.
• Comfortable in Black Box and White Box testing with a capability of finding business logic vulnerabilities.
• Experience directly interfacing with customers over calls & emails.
• Able to understand code in any one programming language.

Preferred Qualifications

• Bug bounty or CTF experience.

Benefits and Perks

• You’ll own your work from day one—no micromanaging, just trust and impact.
• Health insurance cover for you and your spouse.
• You'll join a team that’s scaling fast but still feels like a close‑knit crew—think startup energy with global reach.
• You'll be surrounded by curious minds, creative thinkers, and people who genuinely care (and yes, we do have a dedicated meme channel on Slack).
• Dive deep into the captivating world of cybersecurity.
• And yes, get ready for unforgettable workcations—think Chikmagalur & Jim Corbett. The previous one was at Wayanad, KL.