Senior Penetration Tester

ESDS Software Solution Limited; Nashik District; On-site; INR 2,500,000 - 4,200,000; Full time

Job summary

ESDS Software Solution Limited in Nashik is seeking a Senior Penetration Tester to lead VAPT engagements across web, network, cloud, mobile, APIs and enterprise infrastructure. The role requires strong offensive security skills, client-facing communication, and the ability to mentor junior consultants.

You will perform testing across Web, Network, API, Cloud, and infrastructure, prepare technical and executive reports, and travel about 40% for customer engagements.

Qualifications

• 10+ years of experience in Penetration Testing / Cyber Security.
• Experience with CERT-In Empanelled Auditor/Organization.
• Mandatory Certifications: OSCP, CEH, CISA.
• Willingness to travel 40%+ for customer engagements.

Responsibilities

• Perform Web, Network, Mobile, API, and Cloud Penetration Testing.
• Conduct Vulnerability Assessments and Security Audits.
• Execute Red Team exercises and infrastructure security assessments.
• Identify vulnerabilities and provide remediation recommendations.
• Prepare technical and executive VAPT reports.
• Interact with clients and present assessment findings.
• Mentor junior security consultants and ensure quality deliverables.

Skills

Web security

Network security

Cloud security

API security

Scripting (Python)

PowerShell/bash

Tools

Burp Suite

Nmap

Nessus

Metasploit

Wireshark

OWASP ZAP

Job description

We are looking for an experienced Senior Penetration Tester to perform VAPT engagements across web, network, cloud, mobile, APIs, and enterprise infrastructure. The candidate should have strong offensive security skills, experience in leading security assessments, and excellent client-facing communication.

Key Responsibilities

• Perform Web, Network, Mobile, API, and Cloud Penetration Testing.
• Conduct Vulnerability Assessments and Security Audits.
• Execute Red Team exercises and infrastructure security assessments.
• Identify vulnerabilities and provide remediation recommendations.
• Prepare technical and executive VAPT reports.
• Interact with clients and present assessment findings.
• Mentor junior security consultants and ensure quality deliverables.

Required Skills

• Strong knowledge of Web, Network, API, Cloud, and Infrastructure Security.
• Hands-on experience with tools such as Burp Suite, Nmap, Nessus, Metasploit, Wireshark, OWASP ZAP, and similar security tools.
• Good understanding of OWASP Top 10, Active Directory Security, and Secure Configuration Reviews.
• Basic scripting knowledge (Python, PowerShell, or Bash).

Mandatory Requirements

• 10+ years of experience in Penetration Testing / Cyber Security.
• Experience working with a CERT-In Empanelled Auditor/Organization.
• Mandatory Certifications:
• OSCP
• CEH
• CISA
• Strong communication, documentation, and client management skills.
• Willingness to travel 40%+ for customer engagements.

Preferred

• Experience with Government, BFSI, or Enterprise Security Projects.
• Additional certifications like OSWE, OSEP, CRTP, CISSP, or Cloud Security certifications are an added advantage.

Location:

Nashik

Experience:

10+ Years

Travel:

40%+ (PAN India)