Penetration Tester

Greetings from Peoplefy !!

We have an opening for Penetration Test Engineer role for Pune Location with one of our MNC Clients.

Job Description Penetration Test Engineer

Location: Pune
Work Model: Hybrid
Experience: 2 to 8 Years
Employment Type: Full-time

Role Overview

We are looking for a Penetration Test Engineer with hands-on experience in network and application penetration testing. The candidate will be responsible for identifying, validating, and reporting security vulnerabilities across internal/external networks, web applications, APIs, and infrastructure.

Key Responsibilities

• Perform network penetration testing for internal and external networks, servers, network devices, and infrastructure.
• Conduct vulnerability assessments and penetration testing of web applications, APIs, mobile applications, and network infrastructure.
• Identify and validate vulnerabilities through manual and automated testing techniques.
• Perform testing for common network vulnerabilities, misconfigurations, weak authentication, exposed services, and insecure protocols.
• Conduct activities such as network enumeration, service discovery, vulnerability exploitation, privilege escalation, and post-exploitation analysis.
• Prepare detailed penetration testing reports with risk ratings, technical findings, evidence, and remediation recommendations.
• Work with development, infrastructure, and IT teams to validate remediation of identified vulnerabilities.
• Stay updated on the latest vulnerabilities, attack techniques, tools, and security best practices.

Required Skills

• 2 to 8 years of hands-on experience in penetration testing.
• Strong experience in network penetration testing of internal and external environments.
• Good understanding of TCP/IP, DNS, HTTP/HTTPS, SSH, FTP, SMB, LDAP, Active Directory, and common network protocols.
• Experience with network reconnaissance, enumeration, vulnerability assessment, exploitation, and privilege escalation.
• Good understanding of OWASP Top 10 and web/API security testing.
• Hands-on experience with tools such as Nmap, Nessus/OpenVAS, Metasploit, Burp Suite, and similar security tools.
• Knowledge of Windows and Linux security.
• Experience in external/internal network, wireless, cloud, or infrastructure penetration testing is an advantage.
• Certifications such as OSCP, CEH, eJPT, PNPT, or equivalent are preferred.
• Basic scripting knowledge in Python, Bash, or PowerShell is a plus.
• Knowledge of cloud platforms such as AWS, Azure, or GCP is an advantage.

Interested candidate can share there CV on [email removed]