Senior Penetration Tester

Oculusit; Gurugram District; On-site; INR 1,200,000 - 2,000,000; Full time

Job summary

OculusIT is seeking a Senior Penetration Tester to lead security assessments across higher education and enterprise environments. You will perform network, web, and cloud security testing, identify complex attack paths, and deliver executive reports. Mentorship of junior staff and collaboration with clients are essential.

The role demands hands-on offensive security expertise, strong reporting, and the ability to independently drive engagements from scoping to remediation recommendations.

Qualifications

• 5+ years of professional penetration testing experience.
• Bachelor’s degree in cybersecurity-related field.
• Strong report writing and communication skills.
• Ability to independently execute client-facing security engagements.
• Experience in education, healthcare, or enterprise environments preferred.

Responsibilities

• Perform external and internal network penetration testing engagements.
• Conduct Black Box, Gray Box, and White Box penetration tests.
• Perform web application security assessments using manual and automated techniques.
• Conduct authenticated infrastructure assessments and security reviews.
• Simulate real-world attack scenarios and adversarial techniques.
• Produce comprehensive technical and executive reports and present findings.

Skills

Web Application Security

API Security Testing

Active Directory Security

Privilege Escalation

Lateral Movement

Security Reporting

Password Audits

Education

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field

Tools

Burp Suite Professional

Nmap

Nessus

BloodHound

Impacket

Wireshark

OWASP Testing Methodology

Job description

Employment Type: Full-Time

About the Role:

OculusIT is seeking an experienced Senior Penetration Tester to join our Information Security team. This individual will be responsible for conducting advanced penetration testing engagements across higher education institutions and enterprise environments. The ideal candidate possesses strong hands-on offensive security expertise and is capable of independently leading security assessments, identifying complex attack paths, validating risks, and delivering executive-quality reports.

Key Responsibilities

• Perform external and internal network penetration testing engagements.
• Conduct Black Box, Gray Box, and White Box penetration tests.
• Perform web application security assessments using manual and automated techniques.
• Conduct authenticated infrastructure assessments and security reviews.
• Simulate real-world attack scenarios and adversarial techniques.
• Execute credential compromise assessments and privilege escalation testing.
• Assess Active Directory security and identify attack paths.
• Perform vulnerability validation and exploit verification activities.
• Conduct cloud security assessments (Azure, AWS, Google Cloud preferred).
• Review firewall, network segmentation, and security control effectiveness.
• Develop proof-of-concept exploit demonstrations where appropriate.
• Produce comprehensive technical and executive reports.
• Present findings and remediation recommendations to clients.
• Support red team style activities and security research initiatives.
• Mentor junior security analysts and penetration testers.

Required Technical Skills

Strong experience with:

• Burp Suite Professional
• Nmap
• Nessus
• BloodHound
• Impacket
• Wireshark
• OWASP Testing Methodology

Hands-on experience in:

• Web Application Security Testing
• API Security Testing
• Active Directory Security Assessments
• Password Audits
• Privilege Escalation
• Lateral Movement Simulation
• Security Reporting

Required Certifications

Applicants with below certificates are preferred

OSCP, PNPT, CRTO, OSWE, OSEP, GPEN, GXPN, GWAPT, eCPPT

Qualifications:

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field.
• Minimum 5 years of professional penetration testing experience.
• Strong report writing and communication skills.
• Ability to independently execute client-facing security engagements.
• Experience working with education, healthcare, or enterprise environments preferred.