Experienced Penetration Tester

Company Description GrowSecure is a cybersecurity-focused organization dedicated to helping businesses identify and reduce security risks across their digital ecosystems. The company specializes in offensive security services, including penetration testing and red teaming, to proactively uncover vulnerabilities before they are exploited. GrowSecure emphasizes hands-on technical excellence, continuous learning, and the use of modern tools and methodologies. Team members work closely with clients from various industries, gaining exposure to diverse technologies and security challenges.

Role Description This is a full-time, on-site Penetration Tester role based in Udaipur. The Penetration Tester will plan, execute, and document security assessments of web, mobile, network, and cloud environments to identify and validate vulnerabilities. Daily responsibilities include conducting manual and automated testing, simulating real-world attacks, and collaborating with stakeholders to explain findings and recommend practical remediation steps. The role involves analyzing complex systems, staying current with emerging threats and exploits, and contributing to internal security tooling and playbooks. The Penetration Tester will also support red team engagements, participate in security incident simulations, and mentor team members on best practices in offensive security.

Qualifications

• Strong expertise in offensive security domains, including Red Teaming and Application Security.
• Hands-on skills in Reverse Engineering and Malware Analysis for understanding and dissecting malicious code and binaries.
• Solid foundation in Cybersecurity principles, including network security, secure software development practices, and common attack techniques (e.g., OWASP Top 10, MITRE ATT&CK).
• Proficiency with common penetration testing tools and frameworks (e.g., Burp Suite, Metasploit, Nmap, Wireshark, Kali Linux, scripting in Python or Bash).
• Ability to produce clear, concise technical and non-technical reports and communicate findings to both technical and business audiences.
• Bachelor’s degree in Computer Science, Information Security, or related field, or equivalent practical experience.
• Relevant certifications such as OSCP, OSWE, CRTP, CRTO, CEH, or similar are highly desirable.
• Strong analytical thinking, attention to detail, and willingness to learn and research new vulnerabilities, exploits, and security techniques.