Senior Penetration Tester

Tekskills Inc.; Hyderabad; On-site; INR 1,200,000 - 2,000,000; Full time

Job summary

Tekskills Inc. in Hyderabad, India, seeks a Penetration Testing Expert to conduct global offensive security operations and emulate adversary tactics to test controls across the technology landscape.

You will lead hands-on penetration testing efforts, coordinate with developers and security teams, and produce threat-based reports with guidance on remediation and risk decisions.

Qualifications

• 9+ years of penetration testing experience.
• BE in Computer Information Systems, MIS or equivalent.
• Strong programming/scripting in Java, Python or PowerShell.
• Deep knowledge of OWASP, SANS and security testing standards.
• OSCP certification required; other deft like CRT/CEH/GPEN beneficial.
• Experience with cloud security (AWS/Azure/Google Cloud) and virtualization.
• Familiarity with PTES and OWASP testing frameworks.

Responsibilities

• Lead and perform hands-on penetration testing across apps, networks and cloud.
• Develop and maintain security testing plans and metrics.
• Coordinate with developers, admins and management to remediate findings.
• Produce actionable threat-based reports for executives and teams.
• Mentor junior staff and manage external vendors to ensure quality deliveries.
• Communicate security risks to technical and non-technical stakeholders.

Skills

OSCP

Python

PowerShell

Java

C#

Ruby

Cloud platforms (AWS/Azure/Google)

Education

BE in Computer Information Systems or MIS

Tools

PTES

OWASP

VMware

Windows

Linux

Cloud: AWS/Azure/Google Cloud

Job description

NP : Immediate

JD :

• The Penetration Tester, will provide broad and in depth knowledge to conduct offensive cyber operations across the organization globally
• In this role, you will conduct offensive security operations to emulate adversary tactics and procedures to test preventative, detective and response controls across the global technology landscape
• You will use your expertise to help influence technology decisions and work as part of a team to create consistent approaches to the offensive security processes and techniques

Penetration Testing Duties and Responsibilities:

• Operate a hands-on role involving penetration testing and vulnerability assessment activities of complex applications, operating systems, wired, wireless networks, and mobile applications/devices, Cloud(Azure, AWS, Google Etc) apps and softwares.
• Set up environment and maintain required tools needed for the team.
• Lead and manage Penetration Testing team and Supporting vendors to get qualitative deliveries to our customer.
• Develop and maintain security testing plans
• Able to automate penetration and other security testing on networks, systems and applications.
• Develop meaningful metrics to reflect the true posture of the environment allowing the organization to make educated decisions based on risk.
• Produce actionable, threat-based, reports on security testing results
• Act as a source of direction, training, and guidance for less experienced staff
• Consult with application developers, systems administrators, and management to demonstrate security testing results, explain the threat presented by the results, and consult on remediation
• Communicate security issues to a wide variety of internal and external customers to include technical teams, executives, risk groups, vendors and regulators
• Deliver the annual penetration testing schedule and conducting awareness campaigns to ensure proper budgeting by business lines for annual tests.
• Foster and maintain relationships with key stakeholders and business partners

Certificates:

Must Have

• Offensive Security Certified Professional (OSCP)

Good to have

• CREST Registered Penetration Tester (CRT)
• Certified Ethical Hacker (CEH) Certification
• GIAC Certified Penetration Tester (GPEN)

Penetration Testing Expert Requirements and Qualification:

• Previous working experience as a Penetration Testing Expert for 9 year
• BE in Computer Information Systems, Management Information Systems, or similar relevant field
• In-depth knowledge of application development processes and at least one programing or scripting language (e.g., Java, Scala, C#, Ruby, Perl, Python, PowerShell)
• Must know about standard Industry security Practices (OWASP, SANS, etc), Knowledgeable about industry Security guidelines and compliance such as ISO27001, SOC2, HIPPA etc.
• Hands on experience with testing frameworks such as the PTES and OWASP.
• Applicable knowledge of Windows client/server, Unix/Linux systems, Mac OS X, VMware/Xen, and cloud technologies such as AWS, Azure, or Google Cloud
• Critical thinker and problem solver
• Excellent organizational and time management skills