Execute penetration testing engagements across web applications, APIs, networks, and cloud environments. Identify and exploit vulnerabilities, develop proof-of-concepts, document findings, and provide risk-based remediation guidance. Produce client-ready reports and participate in scoping, kickoff, and review calls. Perform peer QA, retesting, research, tooling, and methodology improvements while communicating effectively with technical and non-technical stakeholders.
Penetration Tester (Mid–Senior Level)
Location - Remote - India
Experience Level - 2-5 years
As a Penetration Tester, you will be responsible for executing penetration testing engagements through client delivery with minimal oversight. You will independently perform testing activities, identify and exploit vulnerabilities, and produce high-quality client deliverables with clear, actionable remediation guidance.You will assess web applications, APIs, networks, and/or cloud environments using a combination of automated tools and manual techniques. This includes configuring and operating testing tools, developing proof-of-concepts to demonstrate impact, and clearly documenting findings.You will also participate in client-facing activities such as scoping discussions, kickoff calls, and report reviews, and are expected to communicate technical concepts effectively to both technical and non-technical audiences. In addition to delivery, you will contribute to the overall quality and evolution of the testing program by performing QA, Re-Tests, peer reviews, supporting internal tooling and methodology improvements, and sharing knowledge with other team members.
Must Have: Offensive Security CertificationExperience testing web applications and APIs (REST, SOAP, XML, JSON) and thick client
Key Responsibilities:
Location - Remote - India
Experience Level - 2-5 years
As a Penetration Tester, you will be responsible for executing penetration testing engagements through client delivery with minimal oversight. You will independently perform testing activities, identify and exploit vulnerabilities, and produce high-quality client deliverables with clear, actionable remediation guidance.You will assess web applications, APIs, networks, and/or cloud environments using a combination of automated tools and manual techniques. This includes configuring and operating testing tools, developing proof-of-concepts to demonstrate impact, and clearly documenting findings.You will also participate in client-facing activities such as scoping discussions, kickoff calls, and report reviews, and are expected to communicate technical concepts effectively to both technical and non-technical audiences. In addition to delivery, you will contribute to the overall quality and evolution of the testing program by performing QA, Re-Tests, peer reviews, supporting internal tooling and methodology improvements, and sharing knowledge with other team members.
Must Have: Offensive Security CertificationExperience testing web applications and APIs (REST, SOAP, XML, JSON) and thick client
Key Responsibilities:
- Execute penetration testing engagements, across web applications, APIs, networks, and cloud environments
- Identify, exploit, and document vulnerabilities with clear supporting evidence and proof-of-concept
- Develop practical, risk-based remediation guidance
- Produce high-quality, client-ready reports
- Participate in client-facing calls including scoping, kickoff, and report reviews
- Perform QA reviews of peer deliverables
- Contribute to internal tools, research, and methodology improvements
- Support and collaborate with team members to maintain delivery quality and consistency
- Handle sensitive client information with confidentiality and professionalism
Qualifications & Experience: - Strong understanding of networks, web/mobile applications, and common security vulnerabilities (e.g., OWASP Top 10, common CVEs)
- Industry-relevant certifications (SANS, Offensive Security, eLearn Security, etc.)
- Experience testing web applications and APIs (REST, SOAP, XML, JSON)
- Familiarity with modern web frameworks (e.g., Angular, Bootstrap)
- Experience with scripting languages such as Python, Bash, PowerShell, or similar
- Knowledge of vulnerabilities including XSS, SQL Injection, XXE, SSRF, deserialization, file inclusion/path traversal, authentication flaws, and remote code execution
- Ability to develop proof-of-concepts and clearly demonstrate impact
- Strong written and verbal communication skills
- Ability to work independently and as part of a team
Similar Jobs
Aerospace • Security • Energy • Industrial
Own product security for Honeywell’s Forge SaaS platform, supporting threat modeling, risk assessments, penetration-test analysis, vulnerability management, secure configuration, and security tooling. Define and track remediation requirements, embed security in Agile development planning, ensure audit and compliance adherence, advise teams on cloud and product security, and coach Security Champions and Product Security Engineers.
Top Skills:
AgileAWSAzureCi/CdCloud SecurityContainer OrchestrationContainer Vulnerability ScanningDevOpsGCPIdentity And Access ManagementIso 27001Pci DssPenetration TestingRisk AssessmentSaaSSastScaSecure Software Development LifecycleSoc 1Soc 2Threat ModelingZero Trust
Aerospace
Own product security for Honeywell’s Forge SaaS platform, integrating threat modeling, risk assessment, vulnerability management, secure configuration, and security tools throughout the SDLC. Partner with development teams during Agile planning, ensure audit and compliance adherence, advise on cloud and container security, manage remediation requirements, present status to leadership, and mentor Security Champions and Product Security Engineers.
Top Skills:
AgileAWSAzureCi/CdCloud SecurityContainer OrchestrationContainer Vulnerability ScanningDevOpsGCPIdentity And Access ManagementIso 27001Pci DssPenetration TestingSaaSSastScaSoc 1Soc 2Ssdlc
Insurance
Leads enterprise security engineering across cloud, infrastructure, applications, APIs, and CI/CD environments. Designs security architecture, automation, DevSecOps controls, WAF protections, vulnerability management, and application security testing. Conducts penetration testing and red team exercises, supports incident response, partners with engineering teams, and mentors security practitioners.
Top Skills:
Api SecurityApplication SecurityAutomationCi/CdCloud SecurityDastDevsecopsGithub ActionsInfrastructure SecurityOwasp Top 10Penetration TestingRed TeamSastScaThreat ModelingVulnerability ManagementWaf
What you need to know about the Mumbai Tech Scene
From haggling for the best price at Chor Bazaar to the bustle of Crawford Market, the energy of Mumbai's traditional markets is a key part of the city's charm. And while these markets will always have their place, the city also boasts a thriving e-commerce scene, ranking among the largest in the region. Driven by online sales in everything from snacks to licensed sports merchandise to children's apparel, the local industry is worth billions, with companies actively recruiting to meet the demands of continued growth.
