Security Penetration Testing Consultant

Withum; Bengaluru Urban; On-site; INR 1,200,000 - 1,500,000; Full time

Job summary

Withum seeks a Security Penetration Testing Consultant with 2–3 years of hands-on experience to perform security assessments across networks, apps, APIs, and cloud environments. You will identify vulnerabilities, explain risk in plain language, and provide practical remediation guidance in client engagements.

The role requires clear communication, professional reporting, and collaboration with client teams.

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or equivalent work experience.
• 2-3 years of experience in penetration testing, ethical hacking, vulnerability assessment, or offensive security.
• Hands-on experience with Burp Suite, Nmap, Nessus, Metasploit, Wireshark, and Kali Linux toolsets.
• Working knowledge of OWASP Top 10, MITRE ATT&CK, network security, application security, and common attack techniques.
• Ability to write clear, concise, and professional technical reports.

Responsibilities

• Conduct penetration testing of external and internal networks, web applications, APIs, cloud environments, wireless networks, and mobile applications when applicable.
• Perform vulnerability assessments and validate identified security weaknesses using manual and automated techniques.
• Document findings with business impact, risk ratings, supporting evidence, and clear remediation guidance.
• Present results to technical and non-technical stakeholders in a professional and understandable manner.
• Support remediation validation, retesting, red team, purple team, and security validation activities as needed.
• Stay current with emerging threats, attack techniques, testing tools, and security technologies.

Job description

We are seeking a motivated and detail-oriented Security Penetration Testing Consultant with 2-3 years of hands-on experience performing security assessments and penetration tests. The ideal candidate combines strong technical security skills with clear communication, sound judgment, and a collaborative consulting mindset. This role supports client engagements by identifying vulnerabilities, explaining risk in plain language, and providing practical remediation guidance.

KEY RESPONSIBILITIES

• Conduct penetration testing of external and internal networks, web applications, APIs, cloud environments, wireless networks, and mobile applications when applicable.
• Perform vulnerability assessments and validate identified security weaknesses using manual and automated techniques.
• Document findings with business impact, risk ratings, supporting evidence, and clear remediation guidance.
• Present results to technical and non-technical stakeholders in a professional and understandable manner.
• Support remediation validation, retesting, red team, purple team, and security validation activities as needed.
• Stay current with emerging threats, attack techniques, testing tools, and security technologies.

REQUIRED QUALIFICATIONS

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or equivalent work experience.
• 2-3 years of experience in penetration testing, ethical hacking, vulnerability assessment, or offensive security.
• Hands-on experience with tools such as Burp Suite, Nmap, Nessus, Metasploit, Wireshark, and Kali Linux toolsets.
• Working knowledge of OWASP Top 10, MITRE ATT&CK, network security, application security, and common attack techniques.
• Ability to write clear, concise, and professional technical reports.

SOFT SKILLS & TEAM COLLABORATION

• Communicates clearly, respectfully, and confidently with clients, teammates, and project stakeholders.
• Explains complex technical concepts in plain language and connects findings to business risk.
• Works effectively in a team environment, including peer review of findings, reports, and testing approaches.
• Builds trust through responsiveness, professionalism, follow-through, and sound handling of sensitive information.
• Accepts and provides constructive feedback in a practical, professional, and improvement-focused way.
• Demonstrates curiosity, adaptability, accountability, and a strong commitment to continuous learning.

PREFERRED QUALIFICATIONS

• Certifications such as Security+, PenTest+, eJPT, PNPT, CEH, or OSCP.
• Experience testing Azure, AWS, or Google Cloud environments.
• Familiarity with Python, PowerShell, or Bash scripting.
• Experience with Active Directory security assessments.
• Prior client-facing consulting, project delivery, or professional services experience.

SUCCESS FACTORS

• Takes ownership of deliverables and meets commitments.
• Balances technical depth with practical, client-ready recommendations.
• Contributes to service improvement, team knowledge sharing, and mentoring opportunities.

NOTE

A hands-on technical proficiency test may be required as part of the interview process