Security Penetration Testing Consultant

Withum; Bengaluru; On-site; INR 900,000 - 1,300,000; Full time

Job summary

Withum in Bengaluru, India, seeks a Security Penetration Testing Consultant with 2–3 years hands-on experience to perform security assessments across networks, apps, and cloud.

You'll document findings with risk ratings and remediation guidance, present results to stakeholders, and support re-testing and validation efforts. The role requires a Bachelor's degree in a relevant field, strong knowledge of OWASP Top 10 and MITRE ATT&CK, and solid reporting skills.

Qualifications

• 2-3 years of experience in penetration testing, ethical hacking, vulnerability assessment, or offensive security.
• Hands-on experience with Burp Suite, Nmap, Nessus, Metasploit, Wireshark, and Kali Linux toolsets.
• Knowledge of OWASP Top 10, MITRE ATT&CK, network and application security, and common attack techniques.
• Ability to write clear, concise, and professional technical reports.

Responsibilities

• Conduct penetration testing of external and internal networks, web apps, APIs, cloud environments, wireless networks, and mobile apps where applicable.
• Perform vulnerability assessments and validate identified weaknesses using manual and automated techniques.
• Document findings with business impact, risk ratings, evidence, and remediation guidance.
• Present results to technical and non-technical stakeholders in a professional manner.
• Support remediation validation, retesting, red team, purple team, and security validation activities as needed.
• Stay current with emerging threats, attack techniques, testing tools, and security technologies.

Skills

Communication

Team collaboration

Report writing

Education

Bachelor's degree in Cybersecurity/IT/CS

Tools

Burp Suite

Nmap

Nessus

Metasploit

Wireshark

Kali Linux

Job description

We are seeking a motivated and detail-oriented Security Penetration Testing Consultant with 2-3 years of hands-on experience performing security assessments and penetration tests. The ideal candidate combines strong technical security skills with clear communication, sound judgment, and a collaborative consulting mindset. This role supports client engagements by identifying vulnerabilities, explaining risk in plain language, and providing practical remediation guidance.

KEY RESPONSIBILITIES

• Conduct penetration testing of external and internal networks, web applications, APIs, cloud environments, wireless networks, and mobile applications when applicable.
• Perform vulnerability assessments and validate identified security weaknesses using manual and automated techniques.
• Document findings with business impact, risk ratings, supporting evidence, and clear remediation guidance.
• Present results to technical and non-technical stakeholders in a professional and understandable manner.
• Support remediation validation, retesting, red team, purple team, and security validation activities as needed.
• Stay current with emerging threats, attack techniques, testing tools, and security technologies.

REQUIRED QUALIFICATIONS

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or equivalent work experience.
• 2-3 years of experience in penetration testing, ethical hacking, vulnerability assessment, or offensive security.
• Hands-on experience with tools such as Burp Suite, Nmap, Nessus, Metasploit, Wireshark, and Kali Linux toolsets.
• Working knowledge of OWASP Top 10, MITRE ATT&CK, network security, application security, and common attack techniques.
• Ability to write clear, concise, and professional technical reports.

SOFT SKILLS & TEAM COLLABORATION

• Communicates clearly, respectfully, and confidently with clients, teammates, and project stakeholders.
• Explains complex technical concepts in plain language and connects findings to business risk.
• Works effectively in a team environment, including peer review of findings, reports, and testing approaches.
• Builds trust through responsiveness, professionalism, follow-through, and sound handling of sensitive information.
• Accepts and provides constructive feedback in a practical, professional, and improvement-focused way.
• Demonstrates curiosity, adaptability, accountability, and a strong commitment to continuous learning.

PREFERRED QUALIFICATIONS

• Certifications such as Security+, PenTest+, eJPT, PNPT, CEH, or OSCP.
• Experience testing Azure, AWS, or Google Cloud environments.
• Familiarity with Python, PowerShell, or Bash scripting.
• Experience with Active Directory security assessments.

SUCCESS FACTORS

• Takes ownership of deliverables and meets commitments.
• Balances technical depth with practical, client-ready recommendations.
• Contributes to service improvement, team knowledge sharing, and mentoring opportunities.

NOTE

A hands-on technical proficiency test may be required as part of the interview process