JOB SUMMARY

Perform manual and automated penetration testing activities across web applications, APIs, internal and external networks, cloud environments, Active Directory, Microsoft Entra ID, wireless environments, and social engineering engagements. Identify, validate, and document security vulnerabilities, support remediation activities, participate in client discussions, and assist in delivering high-quality penetration testing reports.

TESTING AREAS & SPECIALIZATIONS:

Application Security Testing

- Web Application Penetration Testing
- API Penetration Testing
- Mobile Application Security Testing

Network Security Testing

- External Network Penetration Testing
- Internal Network Penetration Testing
- Wireless Security Assessments

Identity & Access Security Testing

- Active Directory Security Assessments
- Microsoft Entra ID Security Assessments
- Hybrid Identity Security Assessments
- Okta Security Assessments
- CyberArk Security Assessments

Cloud Security Testing

- Microsoft Azure Security Assessments
- AWS Security Assessments
- Cloud Configuration Reviews
- Cloud Exposure Assessments

Social Engineering Assessments

- Phishing Campaign Assessments
- Spear Phishing Assessments
- Vishing (Voice Phishing) Assessments
- Smishing (SMS Phishing) Assessments
- User Awareness & Susceptibility Testing

Advanced Security Testing

- Assumed Breach Assessments
- Privilege Escalation Testing
- Lateral Movement Testing
- Attack Path Analysis
- Security Control Validation

OPERATIONAL RESPONSIBILITIES

- Execute penetration testing engagements across web applications, APIs, internal and external networks, cloud environments, wireless infrastructure, Active Directory, Microsoft Entra ID, and social engineering assessments.
- Participate in kickoff calls and technical discovery sessions to understand engagement objectives, scope, and Rules of Engagement.
- Review and communicate testing prerequisites, access requirements, test accounts, VPN access, connectivity requirements, and environmental dependencies.




- Perform manual and automated security testing to identify, validate, and document security vulnerabilities.
- Conduct vulnerability validation and proof-of-concept testing to confirm exploitability and business impact.
- Test for OWASP Top 10 vulnerabilities, authentication and authorization weaknesses, security misconfigurations, privilege escalation paths, and cloud security risks.
- Document findings with detailed technical evidence, screenshots, risk ratings, business impact, and remediation recommendations.
- Develop draft technical reports and support report quality reviews.
- Participate in findings walkthroughs, readout sessions, and remediation discussions with clients and internal stakeholders.
- Perform retesting activities to validate remediation effectiveness and verify vulnerability closure.
- Maintain testing evidence, engagement documentation, and project records throughout the assessment lifecycle.
- Research emerging vulnerabilities, attack techniques, exploit methods, and security tools to improve testing effectiveness.
- Escalate critical and high-risk findings to senior consultants and the Penetration Testing Lead.

EDUCATIONAL REQUIREMENTS, TOOLS & CERTIFICATIONS

Education: Diploma/bachelors degree in computer science, Information Technology or equivalent experience.

Experience:

- 2–5 years of experience in Penetration Testing or VAPT.
- Experience performing web, API, network, cloud, or Active Directory assessments.
- Experience supporting global or US-based customers preferred.
- Willingness to work USA business hours.

Tools & Technologies:

- Primary VM Tools: Tenable, Rapid7 / InsightVM
- Patch / Remediation Tools: Tanium, Automox
- Risk & GRC: TruOps, Cyberfusion
- IAM / PAM: Okta, CyberArk
- Endpoint Security: CrowdStrike, SentinelOne
- Penetration Tools: Burp Suite Skilled, OWASP ZAP, Nmap, Metasploit, BloodHound, sqlmap, Nessus
- Scripting and Automation: Python, Powershell, Bash
- Reporting: Power BI, Excel, dashboards, executive reporting, ticketing workflows

Certifications:

- CEH, eJPT, eWPT, PNPT, Security+, OSCP (preferred)

📌 Penetration Testing Engineer (Hyderabad)
🏢 Shi
📍 Hyderabad