Technical Security Analyst and Penetration Tester

Join Baseel Partners LLP (Baseel.com), a premier provider of cutting-edge cybersecurity and digital transformation services. We are dedicated to ensuring our global clients receive the most robust, scalable, and compliant security solutions. We are expanding our offensive security team and are actively seeking highly skilled **CREST Certified Penetration Testers** to enhance our innovative services.

Key Responsibilities

Security Analysis

- A. OWASP Top 10, API security fundamentals
B. Tools: Fortify, Burp Suite, Postman, Sona Type
- 4+ years of skilled experience in Information Security, Application Security, or Cloud Security
- Perform manual and automated code reviews
- Support policies and vulnerability analysis using application security testing infrastructure including (SAST, DAST, SCA and API Security)
- Experience with implementing different phases of CI/CD like secret scanning, SAST, SCA, DAST, Infrastructure as code, compliance as code, vulnerability management.
- Understanding of web-based application vulnerabilities (OWASP Top 10).
- Familiarity with security standards and frameworks such as ISO 27001, or PCI DSS.

Penetration Testing

- - Conduct thorough penetration testing across web, mobile, network, cloud, and enterprise applications, ensuring a comprehensive security assessment.
- - Engage in Red Team exercises and advanced adversary simulations to test and improve client defenses.
- - Identify, exploit, and meticulously document vulnerabilities, adhering to the highest industry best practices.
- - Create explicit and insightful technical and executive-level reports that provide effective remediation guidance.
- - Collaborate closely with SOC, Blue Teams, and clients to evaluate and elevate their overall security posture.
- - Stay ahead of the curve by keeping informed about the latest exploits, attack vectors, and evolving security trends.

**Required Skills & Qualifications:**

- - Mandatory: CREST CRT/CCSAS/CCSRA certification or equivalent (CCT, etc.).




- - In-depth knowledge of the OWASP Top 10, MITRE ATT&CK; framework, and proven exploitation techniques.
- - Proficient in using tools such as Burp Suite, Metasploit, Cobalt Strike, and Kali Linux.
- - Strong understanding of network protocols, cloud environments (AWS, Azure, GCP), and secure coding principles.
- - Exceptional report writing and client communication skills to convey complex findings effectively.
- - Ability to thrive both independently and collaboratively in team settings.

**Preferred Qualifications:**

- - Additional relevant certifications (OSCP, OSCE, GPEN, etc.) to bolster your expertise.
- - Experience in regulated industries such as finance, healthcare, or government.
- - Familiarity with data governance frameworks and compliance standards (ISO 27001, GDPR, etc.) to enhance client trust.

**Employment Type:**

- - **Full-Time:** Enjoy a competitive salary along with comprehensive benefits.
- - **Part-Time/Freelance:** Embrace flexible engagement options with project-based compensation.

Compensation:

- Full time Role INR 6 to 8 lakh per annum
- Onsite working
- Immediate start
- This is a Full time consultant role.
- Possibility of onsite travel

**Why Join Us?**

- Work on pioneering security projects with a diverse array of global clients.

- Seize the opportunity to participate in advanced Red Team and Purple Team engagements that challenge your skills.

- Benefit from flexible working models, whether onsite, remote, or hybrid.

- Experience unmatched career growth, extensive training sponsorship, and invaluable cross-domain exposure.

Baseel:

Baseel Partners LLP (Baseel.com) is a company initially focused on cybersecurity and data protection. Today, Baseel Group has expanded significantly, providing a comprehensive suite of IT services and products to clients in over 100 countries. A distinguished global entity, Baseel Partners LLP has established a strong network of partners across Europe, the UK, Asia, and MENA countries. Baseel has some clients in the area of Data Governance who are looking for MDM implementation.

📌 Technical Security Analyst and Penetration Tester (Bengaluru)
🏢 Baseel Partners
📍 Bengaluru