Senior Penetration Tester

OCIT; Gurugram District; On-site; INR 1,800,000 - 3,200,000; Full time

Job summary

OculusIT is seeking a Senior Penetration Tester to lead advanced security engagements across higher education and enterprise environments. You will perform web app and network assessments, simulate real-world attacks, and deliver executive-quality reports.

Ideal candidates have hands-on offensive security expertise, strong communication skills, and the ability to independently guide client engagements. Education, healthcare, or enterprise experience is preferred.

Qualifications

• Minimum 5 years of professional penetration testing experience.
• Strong report writing and client-facing communication skills.
• Experience in education, healthcare, or enterprise environments preferred.
• Ability to independently execute client-facing security engagements.

Responsibilities

• Lead external and internal network penetration testing engagements.
• Conduct Black Box, Gray Box, and White Box testing.
• Perform web application security assessments using manual and automated approaches.
• Conduct authenticated infrastructure assessments and security reviews.
• Simulate real-world attack scenarios and privilege escalation testing.
• Develop PoCs and provide remediation recommendations to clients.
• Produce comprehensive technical and executive reports.
• Mentor junior security analysts and testers.
• Support red team style activities and security research.

Skills

Burp Suite Pro

Nmap

Nessus

BloodHound

Impacket

Wireshark

OWASP Testing Methodology

Education

Bachelor's degree in Cybersecurity/IT/CS

Tools

BloodHound

Impacket

Wireshark

OWASP Testing Methodology

Job description

Employment Type: Full-Time

About the Role:

OculusIT is seeking an experienced Senior Penetration Tester to join our Information Security team. This individual will be responsible for conducting advanced penetration testing engagements across higher education institutions and enterprise environments. The ideal candidate possesses strong hands-on offensive security expertise and is capable of independently leading security assessments, identifying complex attack paths, validating risks, and delivering executive-quality reports.

Key Responsibilities

• Perform external and internal network penetration testing engagements.
• Conduct Black Box, Gray Box, and White Box penetration tests.
• Perform web application security assessments using manual and automated techniques.
• Conduct authenticated infrastructure assessments and security reviews.
• Simulate real-world attack scenarios and adversarial techniques.
• Execute credential compromise assessments and privilege escalation testing.
• Assess Active Directory security and identify attack paths.
• Perform vulnerability validation and exploit verification activities.
• Conduct cloud security assessments (Azure, AWS, Google Cloud preferred).
• Review firewall, network segmentation, and security control effectiveness.
• Develop proof-of-concept exploit demonstrations where appropriate.
• Produce comprehensive technical and executive reports.
• Present findings and remediation recommendations to clients.
• Support red team style activities and security research initiatives.
• Mentor junior security analysts and penetration testers.

Required Technical Skills

Strong experience with:

• Burp Suite Professional
• Nmap
• Nessus
• BloodHound
• Impacket
• Wireshark
• OWASP Testing Methodology

Hands-on experience in:

• Web Application Security Testing
• API Security Testing
• Active Directory Security Assessments
• Password Audits
• Privilege Escalation
• Lateral Movement Simulation
• Security Reporting

Required Certifications

Applicants with below certificates are preferred

OSCP, PNPT, CRTO, OSWE, OSEP, GPEN, GXPN, GWAPT, eCPPT

Qualifications:

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field.
• Minimum 5 years of professional penetration testing experience.
• Strong report writing and communication skills.
• Ability to independently execute client-facing security engagements.
• Experience working with education, healthcare, or enterprise environments preferred.