Penetration Tester

Job Title: Penetration Tester, Information Security

Exp: 3 to 7

Location: Pune

Pen test team consists of highly skilled security engineers, independently completing vulnerability. Assessments and pen tests end-to-end. Team members are driven to apply and hone their skills, fostering an exciting and challenging team culture that helps team members grow.

Responsibilities:

• Guides the team in pen test engagements as well as Red Team / Blue Team activities
• Sets and adjusts the focus and engagement strategy for the team
• Motivates the team, and inspires a fun and highly productive work environment
• Performs pen tests to locate security issues
• Analyzes vulnerabilities to determine exploitability and value
• Actively communicates and coordinates within the team
• Documents explains and demonstrate findings within the team as well as to other teams
• Proactively engages with stakeholders to eliminate obstacles to the team objectives
• Writes, reviews and approves assessment reports
• Helps other team members grow

Experience:

• Must be detail oriented and highly organized
• 3-5 years of Red Team and/or hands-on pen test work structured as regular external

engagements, preferably for a reputable pen testing company, in at least 2 of the following areas

• Web applications
• Mobile applications
• Application services (non-web)
• Infrastructure
• 2+ years of hands-on experience in the following areas highly desired
• Operating Systems and Hardening
• Government, Risk and Compliance
• Digital Forensics
• Certifications as expert in any of the above areas of expertise a plus
• CISSP or similar certification a plus

Skills and Knowledge:

• Exceptional pen testing skills, applicable certifications a plus
• Exceptional communication, presentation and interpersonal skills, team catalyst a must
• Applied cryptography, crypto algorithms, PKI, certificates, key management
• PCI, SOX, FIPS 140, JITC, CVE, CWE, OWASP
• Threat modeling, fuzzing, reverse engineering, exploit automation