Senior Engineer Cyber Security

LPL Financials; Hyderabad; Hybride; INR 1 800 000 - 2 400 000; Plein temps

Résumé du poste

LPL Financials is seeking an experienced Penetration Tester to conduct comprehensive assessments across web, mobile, network, cloud, and APIs. You will research vulnerabilities, develop tools, and present actionable findings to drive remediation.

The role requires 5+ years in offensive security, strong scripting ability, and expertise with common testing tools. You will mentor colleagues and contribute to security architecture reviews in a fast-paced client-focused environment.

Qualifications

• Bachelor's degree in computer science, information security, or related field, or equivalent experience.
• 5+ years in penetration testing, ethical hacking, or offensive security roles.
• Proficiency in at least one scripting language (Python, Ruby, PowerShell, Bash).
• Knowledge of web app vulnerabilities (OWASP Top 10) and testing methodologies.
• Experience with Burp Suite, Metasploit, Nmap, Nessus, Acunetix, etc.
• Understanding of networks, OS (Windows/Linux), and cloud security (AWS/Azure/GCP).
• Certifications such as OSCP/OSCE/GPEN/GWAPT/eCPPT desirable.
• Strong written and verbal communication; able to explain complex issues to diverse audiences.

Responsabilités

• Perform comprehensive penetration tests across web, mobile, network, cloud, and APIs.
• Conduct vulnerability research and exploit development to assess weaknesses.
• Develop custom tools, scripts, and methodologies to enhance testing.
• Collaborate with development, operations, and security teams to discuss findings and remediation.
• Lead red team exercises and adversarial simulations.
• Stay updated with emerging threats and testing technologies.
• Mentor junior security engineers and contribute to internal security practices.
• Prepare detailed reports and executive summaries of findings and recommendations.
• Participate in security architecture reviews to provide proactive input.

Connaissances

Scripting languages

OWASP Top 10

Written & verbal communication

Independent & team work

Formation

Bachelor's degree in CS/Info Security or equivalent

Outils

Burp Suite

Metasploit

Nmap

Nessus

Acunetix

Description du poste

Responsibilities:

• Perform comprehensive penetration tests across various environments, including web applications, mobile applications, network infrastructure, cloud platforms, and APIs.
• Conduct vulnerability research and exploit development to assess the true impact of identified weaknesses.
• Develop and implement custom tools, scripts, and methodologies to enhance penetration testing capabilities.
• Collaborate with development, operations, and security teams to communicate findings, recommend remediation strategies, and validate fixes.
• Lead red team exercises and adversarial simulations to evaluate organizational defenses and incident response capabilities.
• Stay current with emerging threats, vulnerabilities, and security technologies, incorporating new insights into testing approaches.
• Mentor junior security engineers and contribute to the development of internal security best practices.
• Prepare detailed technical reports and executive summaries outlining findings, risks, and recommendations.
• Participate in security architecture reviews to provide proactive security input

What are we looking for?

We want strong collaborators who can deliver a world-class client experience. We are looking for people who thrive in a fast-paced environment, are client-focused, team oriented, and are able to execute in a way that encourages creativity and continuous improvement.

Requirements:

• Bachelor's degree in computer science, Information Security, or a related field; or equivalent practical experience.
• 5+ years of experience in penetration testing, ethical hacking, or offensive security roles.
• Proficiency in at least one scripting language (e.g., Python, Ruby, PowerShell, Bash). In-depth knowledge of web application vulnerabilities (OWASP Top 10) and associated testing methodologies.
• Experience with various penetration testing tools such as Burp Suite, Metasploit, Nmap, Nessus, Acunetix, etc.
• Understanding of network protocols, operating systems (Windows, Linux), and cloud security principles (AWS, Azure, GCP). Familiarity with common security frameworks and standards (e.g., NIST, ISO 27001). Relevant certifications such as OSCP, OSCE, GPEN, GWAPT, or eCPPT are highly desirable.
• Exceptional written and verbal communication skills, with the ability to articulate complex technical issues to both technical and non-technical audiences. Ability to work independently and as part of a team in a fast-paced environment.