Senior Offensive Security Tester

Atos; Bengaluru; On-site; INR 900,000 - 1,350,000; Full time

Job summary

Atos in Bengaluru seeks a senior penetration tester to lead engagements across web, mobile, API, cloud, and networks. You will perform Red Team exercises, threat modelling, and exploit development while mentoring junior testers and shaping testing methodologies.

Expertise in OWASP Top 10, AD security, cloud security, and scripting (Python/PowerShell/Bash) is required, with a focus on delivering executive-level security reports and collaborating with cross-functional teams.

Qualifications

• Advanced Web Application Security Testing with OWASP Top 10.
• Network Penetration Testing experience.
• Active Directory Security Assessments familiarity.
• Cloud Security Testing across AWS, Azure, GCP.
• API and Mobile Application Security testing expertise.

Responsibilities

• Lead and execute penetration testing engagements for web, mobile, API, cloud, and enterprise networks.
• Conduct Red Team exercises and adversary simulations to test security posture.
• Identify, exploit, and validate vulnerabilities using manual testing and offensive tools.
• Perform threat modelling and attack-path analysis.
• Develop custom scripts and automation tools to improve testing efficiency.
• Document findings and deliver executive security reports.
• Collaborate with development, infrastructure and security teams for remediation.
• Mentor junior testers and contribute to testing methodologies.
• Stay current with emerging threats and industry best practices.
• Develop Offensive Security services.

Skills

Python scripting

PowerShell scripting

Bash scripting

OWASP Top 10

Network Penetration Testing

Active Directory Security

Cloud Security Testing

API Security Testing

Mobile Security Testing

Red Team Operations

Exploit Development

MITRE ATT&CK

Windows security

Linux security

macOS security

GenAI security

OT Security

Job description

Role & responsibilities

• Lead and execute penetration testing engagements for web applications, mobile applications, APIs, cloud environments, and enterprise networks.
• Conduct Red Team exercises and adversary simulations to evaluate organizational security posture.
• Identify, exploit, and validate vulnerabilities using manual testing techniques and offensive security tools.
• Perform threat modelling and attack-path analysis.
• Develop custom scripts, proof-of-concept exploits, and automation tools.
• Document technical findings and deliver executive-level security reports.
• Collaborate with development, infrastructure, and security teams to recommend remediation actions.
• Mentor junior penetration testers and contribute to testing methodologies.
• Stay current with emerging threats, attack techniques, and industry best practices.
• Develop Offensive Security services.

Preferred candidate profile

• Advanced Web Application Security Testing (OWASP Top 10- Broken Access Control, Cryptographic Failures, Injection, Insecure Design, Security Misconfiguration, Vulnerable/Outdated Components, Identification & Authentication Failures, Software & Data Integrity Failures, Security Logging & Monitoring Failures Server-Side Request Forgery (SSRF))
• Network Penetration Testing
• Active Directory Security Assessment
• Cloud Security Testing (AWS, Azure, GCP)
• API Security Testing
• Mobile Application Security Testing
• Red Team Operations and Threat Emulation
• Exploit Development and Vulnerability Research
• Scripting: Python, PowerShell, Bash
• MITRE ATT&CK Framework knowledge
• Operating Systems Security (Windows, Linux, macOS)
• AI Security Testing (GenAI / Agentic AI)
• OT Security Testing (Nice to have)