Penetration Tester

Apply Only: if you are 1. exceptionally good in Penetration Testing 2. you have full time Experience after college/internship of 2 to 3 years 3. genuine OSCP certification obtained only by your hard work (don't apply if you have a fake OSCP) 4. based in central Mumbai 5. you can go to office everyday 9-6 in Mumbai

Company Description DigiFortex is a CREST-accredited, CERT-In empaneled, and ISO 27001/42001 certified cybersecurity company delivering end-to-end security solutions for modern enterprises worldwide. The company offers services such as advanced penetration testing (VAPT), cloud security, SOC implementation, GRC consulting, data privacy, and AI/LLM security assessments. Its team of certified professionals (including CISSP, CISM, CEH, ISO 27001 LA, CCNA, CIPPE) focuses on uncovering real-world risks and strengthening cyber resilience across IT, cloud, and AI-driven environments. DigiFortex serves industries such as BFSI, healthcare, pharmaceuticals, manufacturing, government, telecom, IT/ITES, and startups, helping them address complex regulatory and security requirements. The organization is also a leader in LLM penetration testing and offers a vCISO model for ongoing governance, risk management, and compliance.

Role Description This is a full-time, on-site Penetration Tester role based in Mumbai. The Penetration Tester will plan and execute vulnerability assessments and penetration tests across web, mobile, network, cloud, and API environments, documenting findings with clear risk and impact analysis. Responsibilities include simulating advanced attack scenarios, supporting red team exercises, and collaborating with internal teams and clients to validate, prioritize, and remediate vulnerabilities. The role involves performing security assessments for traditional IT systems as well as AI/LLM-based applications where applicable, including testing for issues like data leakage and privilege escalation. The Penetration Tester will also contribute to security reports, support presales or technical discussions when needed, and stay current with evolving threat landscapes, tools, and methodologies.

Qualifications

• Strong foundation in Cybersecurity principles, threat modeling, network security, and secure architectures.
• Hands-on experience in Application Security, including web, mobile, API, and cloud application testing.
• Skills in Red Teaming, adversary simulation, and offensive security methodologies are highly desirable.
• Proficiency in Reverse Engineering and Malware Analysis for understanding exploits, payloads, and defensive gaps.
• Familiarity with security tools and frameworks (e.g., Burp Suite, Nmap, Metasploit, Kali Linux, OWASP) and scripting in languages such as Python or Bash.
• Relevant certifications (e.g., OSCP, OSCE) or equivalent practical experience.
• Bachelor’s degree in Computer Science, Information Security, or a related field, or comparable professional experience.
• Ability to communicate complex technical findings clearly to both technical and non-technical stakeholders and work effectively in a

Company Description DigiFortex is a CREST-accredited, CERT-In empaneled, and ISO 27001/42001 certified cybersecurity company delivering end-to-end security solutions for enterprises worldwide. The organization offers a comprehensive portfolio including advanced penetration testing (VAPT), vCISO services, cloud security, data privacy, SOC implementation, GRC consulting, and AI/LLM security assessments. Its certified team (including CISSP, CISM, CEH, ISO 27001 LA, CCNA, CIPPE) focuses on uncovering real-world risks and building long-term cyber resilience across IT, cloud, and AI-driven environments. DigiFortex serves sectors such as BFSI, healthcare, pharma, manufacturing, government, telecom, IT/ITES, and startups, with a strong focus on regulatory compliance and secure digital transformation. The company is also a leader in LLM Penetration Testing, helping organizations secure AI systems against emerging threats while enabling safe and responsible AI adoption.

Role Description This is a full-time, on-site Penetration Tester role based in Mumbai. The Penetration Tester will plan and execute security assessments for web, mobile, network, cloud, and AI/LLM-based systems to identify vulnerabilities and real-world attack paths. Responsibilities include conducting red team exercises, preparing detailed technical reports, documenting proof-of-concepts, and presenting findings and remediation guidance to technical and non-technical stakeholders. The role involves collaborating closely with security architects, developers, and operations teams to validate fixes, improve secure design, and enhance overall security posture. The Penetration Tester will also contribute to threat modeling, tool and script development, and continuous improvement of DigiFortex’s testing methodologies, including participation in advanced and specialized engagements.

Qualifications

• Strong foundation in Cybersecurity, including security fundamentals, common attack techniques, security controls, and secure architecture principles.
• Hands-on expertise in Application Security, including web, mobile, API, cloud, and AI/LLM application testing, as well as secure development best practices.
• Practical experience in Red Teaming, adversary emulation, and advanced threat simulations across on-premise and cloud environments.
• Proficiency in Reverse Engineering and Malware Analysis to dissect binaries, understand payload behavior, and support incident response or advanced assessments.
• Experience with common penetration testing tools and frameworks (e.g., Burp Suite, Metasploit, Nmap, Kali, OWASP methodologies).
• Relevant certifications such as OSCP, OSWE, CRTP, CEH, eJPT, or equivalent practical experience are highly desirable.
• Strong analytical and documentation skills, with the ability to produce clear reports and communicate complex technical findings

Email: careers@digifortex.com

Location: Central Mumbai