Senior Penetration Tester

NTT DATA, Inc.; Hyderabad; Hybrid; INR 1,500,000 - 2,000,000; Full time

Job summary

NTT DATA, Inc. is hiring a Senior Penetration Tester responsible for evaluating and improving cybersecurity defenses through rigorous security testing. This role manages complex penetration testing engagements, conducts simulated cyber attacks, and provides actionable security recommendations.

The ideal candidate will possess advanced experience in penetration testing and relevant security tools, alongside a dedication to ethical conduct and confidentiality. Join our hybrid-working environment and contribute to a culture of cybersecurity within the organization.

Qualifications

• Advanced penetration testing experience and ethical hacking in a global environment.
• Strong understanding of security testing methodologies.

Responsibilities

• Plan and manage penetration testing engagements.
• Conduct simulated cyber-attacks to identify vulnerabilities.
• Provide security recommendations and mitigation strategies.
• Mentor and guide less experienced penetration testing team members.

Skills

Penetration testing tools (Metasploit, Burp Suite, Nmap, Wireshark)

Analytical and problem-solving skills

Knowledge of OWASP, PTES, NIST SP 800-115

Ability to deliver clear reports and recommendations

Ethical conduct and commitment to confidentiality

Education

Bachelor's degree in Information Technology or Computer Science

Security certifications (e.g., OSWE, OSEP, OSCP)

Tools

Metasploit

Burp Suite

Nmap

Wireshark

Job description

Your day at NTT DATA

The Senior Penetration Tester is an advanced subject matter expert responsible for assessing and evaluating the security posture of the company's information systems, networks, applications and infrastructure.

This role involves conducting rigorous and complex penetration testing and ethical hacking activities to identify vulnerabilities and potential weaknesses for exploitation.

This role collaborates with cross functional teams and provides strategic security recommendations and assists in strengthening the organization's overall cybersecurity defenses.

The Senior Penetration Tester serves as a mentor to junior members and is highly experienced in relevant exploits, tooling, exploit writing and is a pivotal role in the company's continuous assessment program.

Key responsibilities

• Plans, executes and manages complex penetration testing engagements on various IT assets, including networks, applications and databases.
• Conducts simulated cyber‑attacks, including social engineering, to identify vulnerabilities and assesses the organization's resilience to cyber threats.
• Performs penetration tests against internal and external facing systems.
• Analyzes and interprets penetration test results and provides detailed reports to relevant stakeholders.
• Provides input to improve the quality and effectiveness of tests in a highly scaled and global environment.
• Articulates complex technical risks through creation of reports and delivering presentations to key stakeholders.
• Works with Security DevOps teams to test the orchestration and automation processes and platforms, feed results into a testing program.
• Supports the assessment risk and the development and/or recommends appropriate mitigation countermeasures based on empirical testing.
• Provides comprehensive technical expertise with web, application and database vulnerability testing.
• Supports the development of the security automation framework and the implementation roadmap.
• Provides actionable security recommendations and mitigation strategies to address identified vulnerabilities.
• Ensures that penetration testing activities align with relevant industry standards, compliance regulations, and best practices and to ensure program integrity and independence within the organization.
• Contributes to any security awareness training and education programs to promote a culture of cybersecurity within the organization.
• Stays up to date with the latest cybersecurity threats, attack vectors, and defensive technologies to continuously improve testing methodologies.
• Mentors and guides less experienced members of the penetration testing team, sharing knowledge and best practices.
• Crafts payloads and executables to specific environments using obfuscation techniques to evade detection from advanced EDR systems.

To thrive in this role

• Ability to work independently and manage multiple projects within remote environment.
• Demonstrates a strong ability to engage with various stakeholders, have a team-based approach and work towards shared goals and outcomes.
• Ability to think outside the box and a passion to improve your skills and drive innovation.
• Ability to compromise systems and demonstrate ways to laterally move post‑compromise.
• In-depth knowledge of common security assessment methodologies, such as OWASP, PTES, or NIST SP 800-115.
• Strong understanding of various operating systems, network protocols, and application security.
• Advanced proficiency in using penetration testing tools and frameworks, such as Metasploit, Burp Suite, Nmap, and Wireshark.
• Advanced knowledge of security assessment tools and technologies used to evaluate web applications, databases, and network infrastructure.
• Excellent analytical and problem‑solving skills to identify and exploit vulnerabilities effectively.
• Strong written and verbal communication skills to deliver clear and concise reports and recommendations to stakeholders.
• Ethical and professional conduct with a commitment to confidentiality and data privacy.

Academic qualifications and certifications

• Bachelor's degree or equivalent in Information Technology or Computer Science or related field.
• Security related certifications such as OSWE, OSEP, OSCP, OSCE, CRTP, GPEN, or CREST is desirable.

Required experience

• Advanced penetration testing experience and ethical hacking gained within a similar global environment.
• Advanced experience with both commercial and open‑source security tools and scripting languages.
• Advanced exposure to security testing scenarios e.g. Capture the Flag / Red Team / Blue Team is desirable.
• Advanced experience with various testing platforms e.g. Hack the Box / Vulnhub / PentesterLab is desirable.

Workplace type

Hybrid Working

Equal Opportunity Employer

NTT DATA is proud to be an Equal Opportunity Employer with a global culture that embraces diversity. We are committed to providing an environment free of unfair discrimination and harassment. We do not discriminate based on age, race, colour, gender, sexual orientation, religion, nationality, disability, pregnancy, marital status, veteran status, or any other protected category. All email communications from an NTT DATA recruiter will come from a @nttdata.com email address.