Senior Penetration Tester

Tsaaro People Consulting; Bengaluru; Hybrid; INR 1,500,000 - 2,800,000; Full time

Benefits offered by this job

Hybrid work flexibility

Global client exposure

Mentorship opportunities

Certifications support

Job summary

Tsaaro People Consulting is seeking a Senior Penetration Tester to lead VAPT engagements across web apps, APIs, networks, cloud environments, and enterprise infrastructure. You will identify exploitable vulnerabilities, simulate real-world attacks, and provide actionable remediation to strengthen clients' security posture.

You will mentor junior testers, collaborate with cross-functional teams, and help deliver risk-based security solutions for global clients from our Bengaluru practice, with

Qualifications

• 3–6+ years of experience in Penetration Testing, VAPT, Offensive Security, Red Teaming, or Cybersecurity Consulting.

Responsibilities

• Lead end-to-end VAPT engagements across web apps, APIs, mobile apps, networks, and cloud.
• Perform manual testing to identify vulnerabilities beyond automated scans.
• Prepare technical reports, executive summaries, and remediation guidance.

Skills

Penetration testing

VAPT

Threat modeling

Red Teaming

Cloud security

Client communication

Education

OSCP

OSEP

OSWE

PNPT

GPEN

CEH Practical

CRTO

Tools

Burp Suite Pro

Metasploit

Nmap

Nessus

Kali Linux

Wireshark

OWASP ZAP

Job description

Job Description:

Job Description

Join Tsaaro as a Senior Penetration Tester

Hack with Purpose. Strengthen Security. Build Cyber Resilience.

Are you passionate about offensive security, ethical hacking, and helping organizations identify and eliminate security vulnerabilities before attackers can exploit them?

At Tsaaro, we go beyond vulnerability identification—we help organizations proactively strengthen their cybersecurity posture through comprehensive Vulnerability Assessment and Penetration Testing (VAPT), Red Team exercises, cloud security assessments, and offensive security consulting. We are looking for a Senior Penetration Tester who thrives in consulting environments, enjoys solving complex security challenges, and can deliver practical, risk-based security solutions to clients.

About Tsaaro

At Tsaaro, privacy and cybersecurity are at the heart of everything we do. Our team of cybersecurity specialists and privacy consultants works closely with organizations to identify vulnerabilities, assess cyber risks, strengthen security controls, and build resilient cyber defense programs.

Our consulting approach focuses on delivering practical, business-aligned cybersecurity solutions that help clients secure critical assets, reduce cyber risk, achieve compliance, and stay ahead of evolving threats.

Your Role: Senior Penetration Tester

As a Senior Penetration Tester, you will lead and execute Vulnerability Assessment and Penetration Testing (VAPT) engagements across web applications, APIs, mobile applications, networks, cloud environments, and enterprise infrastructure. You will work closely with clients to identify exploitable vulnerabilities, simulate real-world attack scenarios, validate security controls, and provide actionable remediation recommendations to strengthen their overall cybersecurity posture.

Key Responsibilities

• Conduct end-to-end Vulnerability Assessment and Penetration Testing (VAPT) across web applications, APIs, mobile applications, internal and external networks, cloud environments, and enterprise infrastructure.
• Perform manual penetration testing to identify and validate security vulnerabilities beyond automated vulnerability scans.
• Conduct security assessments aligned with industry methodologies such as OWASP Testing Guide, PTES, NIST SP 800-115, and MITRE ATT&CK.
• Identify and exploit vulnerabilities including OWASP Top 10, OWASP API Security Top 10, authentication and authorization flaws, business logic vulnerabilities, insecure configurations, privilege escalation, and infrastructure weaknesses.
• Perform internal and external network penetration testing, Active Directory assessments, wireless security testing, and cloud security assessments across AWS, Microsoft Azure, and Google Cloud Platform.
• Execute Red Team assessments, adversary emulation exercises, and attack simulations where required.
• Validate and prioritize vulnerabilities based on business impact, exploitability, and risk.
• Prepare detailed technical reports, executive summaries, proof-of-concept documentation, and actionable remediation recommendations.
• Support clients in vulnerability remediation by performing re-validation testing and security consultations.
• Mentor junior penetration testers and contribute to the continuous improvement of internal methodologies, tools, automation scripts, and offensive security playbooks.
• Stay updated on emerging cyber threats, attack techniques, exploit research, and security vulnerabilities to continuously enhance testing methodologies.
• Collaborate with cross-functional teams to improve secure development practices, strengthen security controls, and enhance clients' overall cybersecurity resilience.

Requirements

• 3–6+ years of experience in Penetration Testing, Vulnerability Assessment (VAPT), Offensive Security, Red Teaming, or Cybersecurity Consulting.
• Strong hands-on experience in web application, API, mobile application, network, cloud, and infrastructure penetration testing.
• Deep understanding of OWASP Top 10, OWASP API Security Top 10, MITRE ATT&CK Framework, PTES, NIST SP 800-115, and common penetration testing methodologies.
• Hands-on experience with offensive security tools such as Burp Suite Professional, Metasploit, Nmap, Nessus, Wireshark, SQLMap, BloodHound, Impacket, Nuclei, Kali Linux, and similar tools.
• Experience conducting security assessments across AWS, Microsoft Azure, and Google Cloud Platform.
• Strong understanding of networking protocols, Windows and Linux security, Active Directory, authentication mechanisms, and secure application architecture.
• Experience preparing technical penetration testing reports, executive summaries, and remediation guidance for clients.
• Excellent analytical, problem-solving, stakeholder management, and client communication skills.
• Professional certifications such as OSCP, OSEP, OSWE, PNPT, GPEN, CEH Practical, CRTO, or equivalent offensive security certifications are highly preferred.
• A collaborative, research-driven, and solution-oriented mindset with the ability to independently manage multiple client engagements.

Benefits

Why Join Tsaaro?

• Work with one of India's fastest-growing privacy and cybersecurity consulting firms.
• Gain exposure to global clients across diverse industries.
• Lead advanced penetration testing and offensive security engagements.
• Accelerate your career with mentorship and leadership opportunities.
• Hybrid work flexibility.
• Continuous learning support through certifications and professional development programs.

From the Tsaaro Team

"At Tsaaro, we believe the strongest security programs are built by continuously challenging them. If you're passionate about offensive security, uncovering hidden risks, and helping organizations strengthen their cyber resilience, we'd love to have you on our team."