Penetration Tester (SMB)

BreachLock; Dadri; On-site; INR 1,200,000 - 2,000,000; Full time

Benefits offered by this job

Private Health Insurance

Job summary

BreachLock is seeking a seasoned penetration tester to work on security assessments across client infrastructures, web and mobile apps. You will leverage an adversary mindset to identify vulnerabilities, document findings, and communicate risks to both technical teams and executives.

The role emphasizes developing offensive capabilities, building automation, and researching new testing techniques, with OSCP/CRTP preferences. Strong teamwork and client-facing skills are essential.

Qualifications

• Degree in Information Technology, Information Systems Security, Cybersecurity, or related work experience.
• 3+ years of Penetration Testing/Red Teaming experience.
• Experience testing Web Apps, Infrastructure, mobile apps, and vulnerability assessments.
• Expertise with Kali Linux and tools like Burp, Metasploit, and other security tools.
• Ability to prioritise workload to meet deadlines with quality deliverables.
• Strong communication, teamwork, and client-facing skills.
• Willingness to research new testing techniques and build automation.
• Preferred OSCP, OSCP+, CRTP qualifications.

Responsibilities

• Understand complex computer systems and security environments for penetration testing.
• Identify vulnerabilities in client infrastructure, Web and Mobile Apps, etc.
• Apply adversary mindset to simulate sophisticated actors and achieve project objectives.
• Document and communicate findings and vulnerabilities to technical and executive levels.
• Assist in development of offensive capabilities.
• Develop internal tools and automation to assist pentest execution.
• Research and develop tools/scripts to identify new vulnerabilities.
• Present recommendations to reduce risk in complex scenarios where remediation is challenging.

Skills

Penetration testing

Red Teaming

Python

.NET

Automation

Education

Degree in IT / Cybersecurity

Tools

Kali Linux

Burp Suite

Metasploit

Job description

• Understand complex computer systems and technical cybersecurity environments for penetration testing.
• Work on projects focused on identifying security vulnerabilities in client’s infrastructure, Web and Mobile Apps, etc.
• Apply an adversary mindset to simulate sophisticated actors and achieve project-specific objectives
• Document and effectively communicate findings and vulnerabilities at both technical and executive management levels
• Assist in the development of offensive capabilities
• Develop internal tools and automation to assist in the execution of penetration tests
• Perform research and develop your own tools or scripts, to identify new vulnerabilities
• Understand and present recommendations to reduce the risk for complex scenarios, wherein Security vulnerabilities cannot be remediated.

• Degree in Information Technology, Information Systems Security, Cybersecurity, or related work experience
• 3+ years of experience in Penetration Testing and/or Red Teaming;
• Experience with penetration testing like Web Applications, Infrastructure, mobile applications, and Vulnerability Assessments;
• Expertise using Kali Linux and tools like Burp, Metasploit, and other security tools;
• Experience in effectively prioritising workload to meet deadlines with quality deliverables;
• Hardworking, committed to teamwork, and able to build strong interpersonal relationships;
• Strong communication skills and should be able to articulate ideas and scenarios Internally and with Clients effectively.
• Ability to maintain professionalism and always strive for high ethical professional standards.
• Willingness to research new security testing techniques and build automation to bring in efficiency;
• Preferred professional qualifications: OSCP, OSCP+, CRTP
• Programming experience in Python, .NET, or other interpreted or compiled languages

• Private Health Insurance