Senior Consultant, Offensive Security

Jobtailor; Bengaluru; On-site; INR 1,800,000 - 3,000,000; Full time

Job summary

Jobtailor in Bengaluru is seeking an experienced penetration tester to lead offensive security engagements across networks, apps, APIs, and cloud. You will design assessment plans, execute tests, and deliver detailed reports to technical and executive audiences.

The role requires 5+ years in penetration testing, strong scripting skills (Python, Bash, PowerShell), and certifications like OSCP/OSCE. You will mentor juniors, support presales, and help evolve internal tooling.

Qualifications

• 5+ years of hands-on penetration testing and offensive security.
• Proficient in network, web, and API testing across platforms.
• Experience with AD/Kerberos and vulnerability management.
• Ability to conduct social engineering assessments and red/purple team exercises.
• Scripting proficiency in Python, Bash, and PowerShell; OSCP/OSCE or equivalent.
• Ability to produce high-quality reports for technical and executive audiences.

Responsibilities

• Deliver advanced penetration tests across networks, apps, APIs, cloud, and wireless.
• Perform vulnerability assessments and exploit development.
• Design red and purple team exercises simulating adversary tactics.
• Develop assessment plans and tailor testing methodologies.
• Create detailed reports and present findings to stakeholders.
• Lead client engagements from scoping to post-delivery support.
• Mentor junior consultants and support tool development.
• Research threats and offensive security tools.
• Support presales with scoping and proposals.
• Conduct threat analysis and provide mitigation guidance.
• Correlate threat data to identify IOC and attacker behavior.
• Produce threat intelligence summaries and track evolving trends.
• Develop tools and automated processes to improve workflows.

Skills

Penetration Testing

Vulnerability Assessment

Red Team Operations

Scripting (Python, Bash, PowerShell)

Network Protocols

Web Technologies

Application Security Concepts

Social Engineering Assessments

Threat Analysis

Exploit Development

Education

OSCP

OSCE

GPEN

GWAPT

Tools

Burp Suite

Cobalt Strike

Metasploit

Nmap

Nessus

Active Directory

Kerberos

Job description

• Deliver advanced penetration tests across internal/external networks, web/mobile apps, APIs, cloud, and wireless environments
• Perform vulnerability assessments and exploit development to assess system and application security
• Design and conduct red and purple team exercises simulating real-world adversary tactics (TTPs)
• Develop assessment plans and tailor testing methodologies to client environments
• Create detailed, high-quality reports and present findings to technical and executive audiences
• Lead client engagements throughout the lifecycle from scoping to post-delivery support
• Mentor junior consultants and support development of internal tools and methodologies
• Research new threats, attack techniques, and offensive security tools
• Support presales efforts including scoping, proposals, and client presentations
• Conduct threat analysis and provide mitigation guidance based on trends and attack patterns
• Correlate and analyse threat data to identify indicators of compromise and attacker behaviour
• Produce threat intelligence summaries and track evolving trends across industries
• Develop tools, scripts, and automated processes to enhance testing and reporting workflows

Requirements

• 5+ years of hands-on experience in penetration testing and offensive security
• Execute network, wireless, web application, and API penetration tests
• Experience with Active Directory (AD) and Kerberos
• Experience conducting vulnerability management and assessments
• Experience conducting social engineering assessments
• Experience conducting Purple Team and Red Team exercises
• Experience with network protocols, operating systems, web technologies, and application security concepts
• Experience with industry-standard tools (e.g., Burp Suite, Cobalt Strike, Metasploit, Nmap, Nessus)
• Demonstrated experience conducting Red Team operations or simulated adversary engagements
• Proficiency in scripting or coding (Python, Bash, PowerShell)
• Relevant certifications such as OSCP, OSCE, GPEN, GWAPT, or equivalent

Core Competencies

Demonstrates extensive expertise in penetration testing, vulnerability assessments, and offensive security, with a strong focus on delivering high-quality reports and mentoring junior consultants. Proficient in developing tailored testing methodologies and conducting red and purple team exercises to simulate real-world adversary tactics.

Highest-signal resume keywords

• Penetration Testing
• Vulnerability Assessment
• Red Team Operations
• Scripting (Python, Bash, PowerShell)
• Industry-Standard Tools (Burp Suite, Cobalt Strike, Metasploit, Nmap, Nessus)

ATS Optimization Keywords

Hard Skills

• Penetration Testing
• Vulnerability Assessment
• Red Team Operations
• Scripting (Python, Bash, PowerShell)
• Network Protocols
• Web Technologies
• Application Security Concepts
• Social Engineering Assessments
• Threat Analysis
• Exploit Development

Soft Skills

• Mentoring
• Client Engagement
• Presentation Skills
• Research Skills
• Collaboration

Certifications & Qualifications

• OSCP
• OSCE
• GPEN
• GWAPT

Industry Keywords

• Offensive Security
• Threat Intelligence
• Adversary Tactics
• Purple Team Exercises
• Client Presentations

Tools & Technologies

• Burp Suite
• Cobalt Strike
• Metasploit
• Nmap
• Nessus
• Active Directory
• Kerberos