Penetration Tester 1 Year Experience Location WFH India

Penetration Tester 1 Year Experience (Location: India)

We are looking for a Penetration Tester with around 1 year of hands-on experience in application security testing and external attack surface assessment.

Key Responsibilities

• Perform application penetration testing across web applications, APIs, and mobile applications.
• Identify security vulnerabilities related to authentication, authorization, session management, input validation, business logic, data exposure, and security misconfigurations.
• Assess applications against relevant security standards and methodologies such as the OWASP Top 10, OWASP API Security Top 10, and OWASP Mobile Security guidelines.
• Perform manual and tool-assisted penetration testing using commonly used security testing tools.
• Conduct OSINT and external attack surface assessments to identify internet-facing assets and publicly exposed information associated with the organization.
• Identify domains, subdomains, IP addresses, applications, services, and other externally exposed assets.
• Validate identified vulnerabilities and determine their potential security impact.
• Prepare clear penetration testing reports with findings, evidence, risk ratings, and remediation recommendations.
• Perform retesting to verify remediation of identified vulnerabilities.
• Support senior team members during penetration testing and security assessment activities.

Required Skills

• Around 1 year of experience in penetration testing or application security.
• Good understanding of web, API, and mobile application security concepts.
• Familiarity with common application security vulnerabilities and OWASP security risks.
• Hands-on experience with tools such as Burp Suite, Nmap, and other commonly used penetration testing and reconnaissance tools.
• Basic understanding of HTTP/HTTPS, REST APIs, authentication mechanisms, networking, and operating systems.
• Familiarity with OSINT, reconnaissance, and external attack surface discovery techniques.
• Basic scripting knowledge using Python, Bash, or PowerShell is an advantage.
• Good analytical, documentation, and communication skills.

Preferred

• Exposure to application security testing tools and methodologies across different platforms.
• Familiarity with Linux and common security testing environments.
• Relevant cybersecurity certifications or practical penetration testing training are advantageous but not mandatory (Example: OSCP, CRTP, BSCP (Burp Suite Certified Professional), eWAPT, eWAPTx etc)Role & responsibilities

Preferred candidate profile