Senior Penetration Tester

Experian; Hyderabad; On-site; INR 2,500,000 - 4,200,000; Full time

Job summary

Experian Hyderabad seeks a Senior Security Consultant to lead tactical assessments in web and mobile application security, threat analysis, and cloud testing across diverse products. You will drive automation and publish research to strengthen our security posture.

You will articulate findings to executives and technical staff, provide remediation guidance, and support new app launches. Strong English and hands-on experience with OWASP/ATT&CK are required.

Qualifications

• High collaboration and stakeholder management skills.
• Culture add alignment withExperian values.
• Knowledge of common pen test and application security tools (Kali, Burp, Nessus).
• Industry certifications in security fields are preferred.
• Fluent English for reporting to executives and technical teams.

Responsibilities

• Conduct tactical security assessments for web, mobile, and cloud environments.
• Develop automation scripts and tooling to enhance pentest workflows.
• Mentor junior pentesters and share best practices.
• Communicate findings and remediation recommendations to technical and non‑technical audiences.
• Support client engagements and drive security improvements across projects.

Skills

Network pentest

Web app pentest

Thick client security

Mobile pentest

Cloud pentest

AI security testing

Education

Industry certifications (CEH/OSCP/OSCE/OSWE/GPEN/GCIH/GWAPT/GXPN)

Tools

Kali Linux

Metasploit

Burp Suite

Wireshark

Web Inspect

Nmap

Nessus

Job description

Experian is a global data and technology company, powering opportunities for people and businesses around the world. We operate across a range of markets, from financial services to healthcare, automotive, agribusiness, insurance, and many more. Experian invests in people and new advanced technologies to unlock the power of data. We have an amazing team of 25,200 people in 32 countries.

Job Description

What does this role do?

Conduct tactical assessments requiring expertise in application security(web and mobile), threat analysis, internal and external network architecture, and a wide array of commercial and custom products. Perform security research and publishing content to contribute to the information security community.

2

Configure and safely utilize attack tools and tactics against authorized targets. Develop scripts, automation frameworks, and security tools to enhance testing capabilities. Conduct AI-focused penetration testing and implement emerging security assessment methodologies.

3

Effectively communicate findings and strategic security recommendations to technical staff, executives, and legal counsel. Provide risk-appropriate guidance on vulnerability remediation and security best practices.

4

Support business units launching new applications and services by conducting comprehensive security assessments to identify risks of compromise or information leakage.

5

Write comprehensive formal security assessments using company standard reporting formats. Participate in client calls to review findings, discuss results, and provide remediation consultation and recommendations.

6

Retest resolved security vulnerabilities and update reports with verification results. Mentor junior pentesters on assessment methodologies, tools, technologies, and emerging security best practices. Drive process improvements, tool optimization, and automation

Skill 1

Network penetration testing; Web application penetration testing; Thick client application security assessment; Mobile penetration testing (iOS and Android); Cloud penetration testing (AWS, Azure, GCP);; AI security testing and vulnerability assessment.

Skill 2

Develop and modify exploits and security tools. Proficient in at least one programming language (Python, Java, Node.js). Proficient in scripting languages including Python, PowerShell, Bash. Experience building automation

Experience 3

Experience with Red, Blue, or Purple team exercises. Hands-on experience with network operating systems (Windows, Linux, macOS), network protocols, virtual environments, cloud platforms (AWS, Azure, GCP), containerized environments, and mobile operating systems (iOS, Android).

Competency 4

Familiarity with defensive technologies including firewalls, IPS/IDS, SIEM, EPP, EDR, UEBA, data encryption. Understanding of AI/ML security controls, secure development practices. Strong communication and stakeholder management skills with ability to mentor junior staff and translate technical findings for non-technical audiences and executives.

Competency 5

Understanding of OWASP, MITRE ATT&CK framework, software development lifecycle (SDLC). Knowledge of CI/CD pipelines, security automation, DevSecOps practices, and emerging security trends.

Qualifications

Qualifications

• 1. High levels of collaboration, communication skills, stakeholder management and teamwork 2. Alignment with Experian’s purpose and core values, we look for ‘culture add’ 3. Knowledge of common pen test and application security tools, such as Kali Linux, Metasploit, Burp Suite, Wireshark, Web Inspect, Network Mapper (NMAP), Nessus and others 4. Ideally Industry certifications such as CEH, OSCP, OSCE, OSWE, GPEN, GCIH, GWAPT, or GXPN 5. Fluent and proficient in English to enable delivery of verbal and written reports and presentations to both technical and executive audiences

Additional Information

Recruitment Fraud Awareness- Experian's recruitment process is conducted only through authorised channels. Recruitment communications will only be sent from an @experian.com email address. Experian will never ask candidates to make any payment as part of an application, interview, assessment, onboarding, or recruitment process.

Our uniqueness is that we celebrate yours. Experian's people first, inclusive and purpose driven culture is multi award-winning; World's Best Workplaces™ 2025 (Fortune Global Top 25), Great Place To Work™ in 26 countries to name a few. Check out Experian Life on social or explore our Careers Site to understand why. Experian is also proud to be an Equal Opportunity and affirmative action employer. If you have a disability or special need that requires accommodation, please let us know at the earliest opportunity.