Penetration Tester

2 days ago

Mumbai, Maharashtra, India ISECURION Full time
Job Description

Job Title: Penetration Tester

Location: Thane Mumbai

Experience: 6+ Years in Information Security Department

Notice Period: Immediate

Job Summary:

We are seeking a highly skilled and creative Penetration Tester with over 6 years of experience to join our Offensive Security team. The successful candidate will have deep expertise in identifying vulnerabilities in enterprise infrastructure, web applications, Active Directory environments, and cloud platforms (AWS, Azure, GCP) all without prior internal knowledge of the systems being tested.

This role demands a think-outside-the-box mindset, capable of discovering novel attack vectors that others overlook, with a strong focus on making meaningful, measurable impacts on organizational security.

Key Responsibilities:

Perform comprehensive black box penetration testing of:

o Enterprise networks and internal infrastructure

o Web and mobile applications

o Active Directory environments (Kerberos, LDAP, domain trusts, etc.)

o Cloud platforms including AWS, Azure, and GCP

Identify and exploit misconfigurations, logic flaws, privilege escalations, and other high-impact vulnerabilities.

Simulate real-world attack scenarios such as credential attacks, lateral movement, and privilege escalation in AD/cloud hybrid environments.

Document detailed technical findings, risk ratings, proof-of-concept exploits, and remediation strategies.

Collaborate with internal teams to validate fixes and ensure secure configuration post-remediation.

Stay up to date with threat actor tactics, techniques, and procedures (TTPs).

Contribute to internal tooling, red team exercises, and security testing methodologies.

Mentor junior team members and assist in strategic planning of offensive security initiatives.

Required Skills and Qualifications:

6+ years of proven experience in black box penetration testing.

Strong expertise in Active Directory testing, including attack paths, domain privilege escalation, and lateral movement.

Experience in cloud security testing across AWS, Azure, and GCP environments (IAM roles, misconfigured services, metadata exploitation, etc.).

Solid understanding of network protocols, web application security, OWASP Top 10, and API exploitation.

Proficiency with tools such as Burp Suite, Nmap, Impacket, BloodHound, Mimikatz, Metasploit, and PowerView etc.

Scripting ability in Python, PowerShell, or Bash for exploit development and automation.

Strong analytical and creative problem-solving skills.

Excellent report writing and verbal communication abilities.

Preferred Certifications (Good to Have):

OSCP / OSEP / CRTP / CRTE / OSED / OSWE / GPEN / AZ-500 / AWS Security Specialty

Microsoft or cloud-specific red team certifications are a plus

What Were Looking For:

A strategic attackers mindset who can go beyond surface-level vulnerabilities.

A technical leader who can assess modern hybrid infrastructures with precision.

A contributor who can deliver real-world risk insights, not just findings.

  • Penetration Tester

    4 days ago

    Mumbai, Maharashtra, India DigiFortex Full time

    Company DescriptionDigiFortex is an emerging Cyber Security startup recognized by the Govt. of Karnataka and Silicon India. The company is ISO 27001 certified and empanelled by CERT-In for Information Security Auditing Services. DigiFortex operates globally, focusing on Advanced Penetration Testing (VA/PT), Managed Security Services (MSSP), Security...

  • Penetration Tester

    2 days ago

    Mumbai, Maharashtra, India DigiFortex Full time

    Company Description Digi Fortex is an emerging Cyber Security startup recognized by the Govt.of Karnataka and Silicon India.The company is ISO 27001 certified and empanelled by CERT-In for Information Security Auditing Services.Digi Fortex operates globally, focusing on Advanced Penetration Testing (VA/PT), Managed Security Services (MSSP), Security...

  • Penetration Tester

    4 days ago

    Mumbai, Maharashtra, India DigiFortex Full time

    Company Description DigiFortex is an emerging Cyber Security startup recognized by the Govt. of Karnataka and Silicon India. The company is ISO 27001 certified and empanelled by CERT-In for Information Security Auditing Services. DigiFortex operates globally, focusing on Advanced Penetration Testing (VA/PT), Managed Security Services (MSSP), Security...

  • Penetration Tester

    3 days ago

    Mumbai, Maharashtra, India DigiFortex Full time

    Company DescriptionDigiFortex is an emerging Cyber Security startup recognized by the Govt. of Karnataka and Silicon India. The company is ISO 27001 certified and empanelled by CERT-In for Information Security Auditing Services. DigiFortex operates globally, focusing on Advanced Penetration Testing (VA/PT), Managed Security Services (MSSP), Security...

  • Cyber Security Professional

    7 days ago

    Mumbai, Maharashtra, India beBeePenetration Full time

    Job Description:We are seeking a seasoned cyber security professional to join our team as an Infrastructure Penetration Tester. The ideal candidate will have hands-on experience with various tools and technologies, including network architecture, firewalls, and penetration testing.As an Infrastructure Penetration Tester, you will be responsible for...

  • Cybersecurity Penetration Specialist

    4 days ago

    Mumbai, Maharashtra, India beBeePenetration Full time ₹ 18,00,000 - ₹ 22,00,000

    Job OpportunityRole ProfileWe seek a skilled penetration tester to perform thorough assessments of our systems and applications, engaging in reverse engineering, red teaming activities, and malware analysis.

  • Cyber Security Expert

    4 days ago

    Mumbai, Maharashtra, India beBeePenetration Full time US$ 1,00,000 - US$ 1,50,000

    Job DescriptionA Cyber Security expert with a focus on Advanced Penetration Testing is sought to join our global team.We operate across the world, focusing on various security services including VA/PT, MSSP, SOC, and more. With a presence in multiple countries, we have delivered projects for large corporations.We leverage automation and intelligence to...

  • Information Security Professional

    2 days ago

    Mumbai, Maharashtra, India beBeeCybersecurity Full time ₹ 20,00,000 - ₹ 25,00,000

    Job Title:Penetration TesterRole Overview:A Penetration Tester is required to perform penetration tests on various systems, conduct application security assessments, and engage in reverse engineering.Key Responsibilities:Conducting penetration tests on different systems.Performing application security assessments.Engaging in reverse engineering.Performing...

  • Senior Cybersecurity Specialist

    4 days ago

    Mumbai, Maharashtra, India beBeeCybersecurity Full time ₹ 9,00,000 - ₹ 12,00,000

    Job Summary:We are seeking a skilled Penetration Tester to join our team. As a Penetration Tester, you will be responsible for conducting penetration tests on various systems, analyzing security vulnerabilities, and providing recommendations for remediation.The ideal candidate will have expertise in reverse engineering, malware analysis, and application...

  • CyRAACS - Technical Lead - Vulnerability Assessment & Penetration Testing

    3 hours ago

    Mumbai, Maharashtra, India CYRAAC Services Private Limited Full time

    Job Title : Tech Lead Vulnerability Assessment & Penetration Testing (VAPT)Location : Mumbai [Onsite]Experience : 3-8 yearsNote : Looking only for candidates who can join within 30 days.We are looking for a highly skilled Tech Lead VAPT with strong expertise in identifying complex security vulnerabilities across web, mobile, infrastructure, and cloud...