Senior Penetration Tester

Job Summary

Senior Penetration Tester at Tsaaro, Bangalore, Karnataka, India.

Join Tsaaro as a Senior Penetration Tester

Hack with Purpose. Strengthen Security. Build Cyber Resilience.

Are you passionate about offensive security, ethical hacking, and helping organizations identify and eliminate security vulnerabilities before attackers can exploit them.

As a Senior Penetration Tester, you will lead and execute Vulnerability Assessment and Penetration Testing (VAPT) engagements across web applications, APIs, mobile applications, networks, cloud environments, and enterprise infrastructure. You will work closely with clients to identify exploitable vulnerabilities, simulate real-world attack scenarios, validate security controls, and provide actionable remediation recommendations to strengthen their overall cybersecurity posture.

Responsibilities

• Conduct end-to-end Vulnerability Assessment and Penetration Testing (VAPT) across web applications, APIs, mobile applications, internal and external networks, cloud environments, and enterprise infrastructure.
• Perform manual penetration testing to identify and validate security vulnerabilities beyond automated vulnerability scans.
• Conduct security assessments aligned with industry methodologies such as OWASP Testing Guide, PTES, NIST SP, and MITRE ATT&CK.
• Identify and exploit vulnerabilities including OWASP Top 10, OWASP API Security Top 10, authentication and authorization flaws, business logic vulnerabilities, insecure configurations, privilege escalation, and infrastructure weaknesses.
• Perform internal and external network penetration testing, Active Directory assessments, wireless security testing, and cloud security assessments across AWS, Microsoft Azure, and Google Cloud Platform.
• Execute Red Team assessments, adversary emulation exercises, and attack simulations where required.
• Validate and prioritize vulnerabilities based on business impact, exploitability, and risk.
• Prepare detailed technical reports, executive summaries, proof-of-concept documentation, and actionable remediation recommendations.
• Support clients in vulnerability remediation by performing re-validation testing and security consultations.
• Mentor junior penetration testers and contribute to the continuous improvement of internal methodologies, tools, automation scripts, and offensive security playbooks.
• Stay updated on emerging cyber threats, attack techniques, exploit research, and security vulnerabilities to continuously enhance testing methodologies.
• Collaborate with cross-functional teams to improve secure development practices, strengthen security controls, and enhance clients overall cybersecurity resilience.

Requirements

• 36+ years of experience in Penetration Testing, Vulnerability Assessment (VAPT), Offensive Security, Red Teaming, or Cybersecurity Consulting.
• Strong hands-on experience in web application, API, mobile application, network, cloud, and infrastructure penetration testing.
• Deep understanding of OWASP Top 10, OWASP API Security Top 10, MITRE ATT&CK Framework, PTES, NIST SP, and common penetration testing methodologies.
• Hands-on experience with offensive security tools such as Burp Suite Professional, Metasploit, Nmap, Nessus, Wireshark, SQLMap, BloodHound, Impacket, Nuclei, Kali Linux, and similar tools.
• Experience conducting security assessments across AWS, Microsoft Azure, and Google Cloud Platform.
• Strong understanding of networking protocols, Windows and Linux security, Active Directory, authentication mechanisms, and secure application architecture.
• Experience preparing technical penetration testing reports, executive summaries, and remediation guidance for clients.
• Excellent analytical, problem-solving, stakeholder management, and client communication skills.
• Professional certifications such as OSCP, OSEP, OSWE, PNPT, GPEN, CEH Practical, CRTO, or equivalent offensive security certifications are highly preferred.
• A collaborative, research-driven, and solution-oriented mindset with the ability to independently manage multiple client engagements.

Key Skills

• Vulnerability Assessment
• Penetration Testing
• Web Application Security
• API Security
• Mobile Application Security
• Cloud Security (AWS/Azure/GCP)
• Red Team / Adversary Emulation
• OWASP Top 10
• Mitre att&ck

Location: Bangalore, Karnataka, India

Experience: 4-5 years

Job Type: Full time

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.