Key Responsibilities:

- Plans, executes and manages complex penetration testing engagements on various IT assets, including networks, applications and databases.

- Conducts simulated cyber-attacks, including social engineering, to identify vulnerabilities and assesses the organization's resilience to cyber threats.

- Performs penetration tests against internal and external facing systems.

- Analyses and interprets penetration test results and provides detailed reports to relevant stakeholders.

- Provides input to improve the quality and effectiveness of tests in a highly scaled and global environment.

- Articulates complex technical risks through creation of reports and delivering presentations to key stakeholders.

- Works with Security DevOps teams to test the orchestration and automation processes and platforms, feed results into a testing program.

- Supports the assessment risk and the development and/or recommends appropriate mitigation countermeasures based on empirical testing.

- Provides comprehensive technical expertise with web, application and database vulnerability testing.

- Supports the development of the security automation framework and the implementation roadmap.

- Provides actionable security recommendations and mitigation strategies to address identified vulnerabilities.

- Ensures that penetration testing activities align with relevant industry standards, compliance regulations, and best practices.

- Contributes to any security awareness training and education programs to promote a culture of cybersecurity within the organization.

- Stays up to date with the latest cybersecurity threats, attack vectors, and defensive technologies to continuously improve testing methodologies.

Knowledge and Attributes:

- Ability to work independently and manage multiple projects within remote setting.





- Demonstrates a strong ability to engage with various stakeholders, have a team-based approach and work towards share goals and outcomes.

- Ability to think outside the box and a passion to improve your skills and drive innovation.

- Ability to compromise systems and demonstrate ways to laterally move post compromise.

- In-depth knowledge of common security assessment methodologies, such as OWASP, PTES, or NIST SP 800-115.

- Strong understanding of various operating systems, network protocols, and application security.

- Proficiency in using penetration testing tools and frameworks, such as Metasploit, Burp Suite, Nmap, and Wireshark.

- Knowledge of security assessment tools and technologies used to evaluate web applications, databases, and network infrastructure.

- Excellent analytical and problem-solving skills to identify and exploit vulnerabilities effectively.

- Strong written and verbal communication skills to deliver clear and concise reports and recommendations to stakeholders.

- Ethical and professional conduct with a commitment to confidentiality and data privacy.

Academic Qualifications and Certifications:

- Bachelor's degree or equivalent in Information Technology or Computer Science or related field.

- Security related certifications such as OSWE, OSEP, OSCP, OSCE, CRTP, GPEN, or CREST is desirable.

Required Experience:

- Seasoned demonstrated penetration testing experience and ethical hacking gained within a similar global environment.

- Seasoned demonstrated experience with both commercial and open-source security tools and scripting languages.

- Seasoned demonstrated exposure to security testing scenarios e.g. Capture the Flag / Red Team / Blue Team is desirable.

- Seasoned demonstrated experience with various testing platforms e.g. Hack the Box / Vulnhub / PentesterLab is desirable.

📌 Penetration Tester (Hyderabad)
🏢 NTT Data
📍 Hyderabad