Senior Security Consultant – Penetration Testing & Security Automation

Symosis Security; India; A distancia; INR 1.600.000 - 2.200.000; Jornada completa

Descripción de la vacante

Symosis Security in India seeks a hands-on Senior Security Consultant to lead penetration testing engagements across web apps, APIs, and networks, while building automation tools. You will deliver client-ready reports and work remotely as an independent contractor with no employee benefits.

Certifications such as OSCP or GWAPT are preferred, and experience with Burp Suite and Nmap is essential. The role emphasizes independent delivery, reporting, and collaboration with clients on security

Formación

• 4+ years of hands-on penetration testing experience.
• Independently deliver web/API and network tests beyond automated scanners.
• Strong understanding of authentication, authorization, business logic, and vulnerabilities.
• Practical experience with Burp Suite, Nmap, and testing tools.
• Ability to write or modify scripts and troubleshoot issues.
• Strong written English and client-ready reporting.

Responsabilidades

• Conduct web application, API, and network penetration tests.
• Manually validate vulnerabilities and document exploitation evidence.
• Perform Android/iOS testing and authorized adversary simulations.
• Own testing from scope to reporting and retesting.
• Build scripts and utilities to improve testing efficiency.
• Review and validate generated code with tooling.

Conocimientos

Penetration testing

Manual testing beyond automated scans

Scripting (Python/PowerShell/Bash)

Client reporting

English communication

Educación

OSCP, OSEP, eCPPT, eWPT/eWPTX, GPEN, GWAPT, CEH Practical

Herramientas

Burp Suite

Nmap

Descripción del empleo

Senior Security Consultant – Penetration Testing & Security Automation

Full-time contract | Remote, India | ₹16–22 lakh per year

Independent contractor engagement; no employee benefits.

About Symosis Security

Symosis Security is a Silicon Valley cybersecurity consulting and engineering firm with delivery teams in the US and India. We help enterprise and public-sector clients assess risk, test defenses, and improve security across applications, cloud platforms, identity, and AI systems.

We’re looking for a hands‑on penetration tester who can independently deliver engagements, identify exploitable weaknesses, and produce clear, client‑ready reports.

What you’ll do

• Conduct web application, API, and internal/external network penetration tests.
• Manually validate vulnerabilities, test authorization and business logic, and document exploitation evidence.
• Perform Android/iOS testing and authorized adversary simulations based on experience and engagement scope.
• Own testing activities from scope review and execution through reporting, findings walkthroughs, and remediation retesting.
• Build scripts and utilities to improve testing efficiency using Python, PowerShell, Bash, and APIs.
• Use Claude, Codex, GitHub Copilot, or similar tools while reviewing and validating generated code.

Essential qualifications

• 4+ years of hands‑on penetration testing experience.
• Ability to independently deliver web/API and network penetration tests beyond automated scanning.
• Strong understanding of authentication, authorization, business logic, common application vulnerabilities, and network exploitation.
• Practical experience with Burp Suite, Nmap, and relevant testing tools.
• Ability to write or modify scripts and troubleshoot technical issues.
• Strong written English and client‑ready reporting skills.
• At least one relevant certification: OSCP, OSEP, eCPPT, eWPT/eWPTX, GPEN, GWAPT, CEH Practical, or comparable certification.

Preferred qualifications

• Android/iOS or thick‑client penetration testing.
• Active Directory assessments and authorized red team engagements.
• Source‑code review, cloud security testing, or AI application security testing.
• Additional certifications such as CISSP or CEH.