Conduct network, web application, cloud, and red-team penetration tests; identify and exploit vulnerabilities; develop proof-of-concept scripts; assess cloud, API, container, Windows, Linux, and Active Directory security; document CVSS-rated findings and remediation plans; verify fixes; and support blue teams with threat and SIEM monitoring insights.
This is a remote position.
Penetration Tester / Ethical Hacker (Offensive Security)
Job Details
- Employment Type: Contract
- Work Mode: Remote
- Location: Offshore
- Total Experience Required: 4 to 8 years
- Relevant Experience Required: 3+ years of dedicated offensive security penetration testing and red teaming experience
- Mandatory Certification: Offensive Security Certified Professional (OSCP) or GIAC Penetration Tester (GPEN)
Job Summary
We are seeking an experienced Penetration Tester to conduct rigorous, multi-vector offensive security assessments against our global network infrastructure, web applications, and cloud environments. The ideal candidate will emulate advanced persistent threat (APT) tactics, discover hidden exploit vulnerabilities, and write technical proof-of-concept reports to help software engineering and infrastructure teams systematically harden corporate defenses.
Key Responsibilities
- Execute comprehensive network and web application penetration tests, utilizing automated scanning suites alongside manual exploration tactics to expose system vulnerabilities.
- Conduct realistic red-teaming simulation campaigns, probing corporate defenses, orchestrating advanced social engineering scenarios, and bypassing physical perimeter monitoring configurations.
- Develop structural custom exploitation scripts (e.g., Python, PowerShell, Bash) to demonstrate vulnerability severity while respecting operational stability guidelines.
- Triage and evaluate cloud infrastructure entry vectors, assessing multi-tenant environment perimeters, microservice containers, API authentication weaknesses, and misconfigured access permissions.
- Document and present highly detailed vulnerability disclosure reports, assigning clear impact scoring (CVSS), defining business risk matrices, and detailing step-by-step technical remediation paths.
- Perform rigorous post-remediation verification sweeps, re-testing patched software frameworks, validated infrastructure updates, and newly implemented defensive logic barriers.
- Collaborate closely with blue-team defensive operators, providing specific threat behavior inputs to optimize SIEM monitoring rules and security log alerts.
Requirements
- 4 to 8 years of core cybersecurity technical experience, with 3+ dedicated years actively performing authorized penetration tests within enterprise frameworks.
- Strong technical mastery of standard exploitation tooling arrays (e.g., Burp Suite Pro, Metasploit, Nmap, Kali Linux), reverse engineering scripts, and manual payload construction.
- Deep structural understanding of the OWASP Top 10 web/API flaws, Windows/Linux kernel security architectures, privilege escalation techniques, and active directory exploit vectors.
- Mandatory certification: OSCP or GPEN.
Preferred Qualifications
- Offensive Security Certified Expert (OSCE) or Advanced Web Attacks and Exploitation (OSWE) credential.
- Experience testing complex enterprise platforms like Salesforce networks, custom SAP endpoints, or specialized Workday database connectivity pipelines.
Similar Jobs
.jpeg)
Artificial Intelligence • Hardware • Information Technology • Machine Learning
Leads laboratory equipment maintenance and engineering activities, including installation, calibration, troubleshooting, upgrades, preventive maintenance, failure analysis, and corrective actions. Manages technicians, vendors, audits, documentation, equipment tracking, operating system installation, and equipment training. Collaborates with IT, facilities, logistics, purchasing, and production teams to support semiconductor laboratory and manufacturing operations while ensuring safety, quality, and ISO/IEC 17025 compliance.
Top Skills:
3D X-RayBend TestersCleanroom EquipmentCsamEquipment Tracking SystemEsdFibFtirHumidity ChambersIso/Iec 17025LinuxReflow OvensSemSemiconductor Laboratory EquipmentSemiconductor TestersShock TestersSoak ChambersTemperature ChambersTemperature Cycling SystemsThb SystemsWindowsX-Section Equipment
Artificial Intelligence • Big Data • Cloud • Information Technology • Software • Big Data Analytics • Automation
Owns the technical relationship for enterprise Dynatrace customers, driving platform adoption, health, optimization, consumption, and measurable business value. Leads success planning, executive reviews, escalations, support case management, change windows, upgrades, and enhancement advocacy. Advises on observability architecture, cloud-native environments, ITSM integrations, and production changes while coordinating cross-functional teams and influencing stakeholders without direct authority.
Top Skills:
AWSCmdbDynatraceGoogle Cloud PlatformItsmJira Service ManagementKubernetesAzureOpenshiftServicenow
Cloud • Security • Software • Cybersecurity • Automation
Leads second-line SOX compliance for assigned business processes, advising control owners on risk assessment, control design, remediation, and deficiency evaluation. Prepares auditor-ready technical memos, reports, process documentation, and severity assessments; coordinates with Internal and external auditors; and partners with IT SOX on systems and application controls. The role also supports compliant adoption and automation of AI-enabled processes and collaborates with cross-functional business leaders.
Top Skills:
Ai AgentsAi ToolsAuditboardCoso Framework
What you need to know about the Pune Tech Scene
Once a far-out concept, AI is now a tangible force reshaping industries and economies worldwide. While its adoption will automate some roles, AI has created more jobs than it has displaced, with an expected 97 million new roles to be created in the coming years. This is especially true in cities like Pune, which is emerging as a hub for companies eager to leverage this technology to develop solutions that simplify and improve lives in sectors such as education, healthcare, finance, e-commerce and more.
