- Job ID: 845660

- 4 - 7 Years

- 1 Opening
- Bengaluru

Role description

As a Penetration Testing Engineer at Grant Thornton, you will conduct advanced security assessments across applications, networks, cloud environments, and enterprise systems. You will emulate real-world attack scenarios, identify vulnerabilities, and collaborate with engineering and client teams to remediate risks. This role requires a balance of technical expertise, consulting skills, and robust communication.

Skills

Plan & Execute Penetration Tests: Perform authorized tests on web applications, APIs, cloud platforms (AWS/Azure/GCP), and internal networks following industry standards (PTES, NIST 800-115, OSSTMM).Reporting & Advisory: Deliver clear, actionable reports with risk ratings, exploit narratives, and remediation guidance tailored for technical and executive audiences.

Client Engagement: Work directly with clients to scope engagements, explain findings, and advise on secure design and preventive controls.Tooling & Automation: Develop scripts and tools (Python, PowerShell, Bash) to streamline testing and reporting processes.

Continuous Improvement: Contribute to internal methodologies, playbooks, and secure SDLC practices; mentor junior team members.

Other details

Required Qualifications

Experience: 4+ years in penetration testing or offensive security.
Technical Skills:
Web/API testing (OWASP Top 10, ASVS)
Cloud security (AWS/Azure/GCP misconfigurations, IAM)
Network/Active Directory assessments
Familiarity with containers/Kubernetes security
Tools: Burp Suite Pro, Nmap, Metasploit, Kali Linux, Wireshark, Nessus/OpenVAS.
Scripting: Python, PowerShell,



Bash (Go is a plus).
Frameworks & Standards: PTES, NIST 800-115, MITRE ATT&CK;, OWASP.
Certifications (Preferred): OSCP, OSWE, OSEP, GPEN, GXPN, eCPPT.

Preferred Qualifications

Consulting experience with client-facing communication.
Familiarity with compliance frameworks (SOC 2, ISO 27001, PCI DSS).
Ability to translate technical findings into business risk language.

Soft Skills

Strong communication and presentation skills.
Ability to manage multiple engagements and deadlines.
Ethical mindset and strict adherence to authorized testing boundaries.

About Grant Thornton INDUS

Grant Thornton INDUS is the global capability center for Grant Thornton US, the U.S. member firm of Grant Thornton International Ltd., a leading global network of independent audit, tax, and advisory firms. Founded in Chicago in 1924, Grant Thornton US is one of the leading accounting and advisory firms in the U.S., bringing together $4B+ in revenue, 56 U.S. offices, and a multi-national platform spanning 20 countries with 25,000 people. It combines deep expertise, advanced technology, and a collaborative mindset to help clients solve complex challenges and grow with confidence. Since 2012, Grant Thornton INDUS has brought together 3,300+ professionals across Tax, Audit, Advisory, Client Services, Innovation, and Enabling Functions to deliver high-impact solutions for Grant Thornton US and its global network. Recognized as a Great Place To Work® for three consecutive years and among India’s Top 15 Best Workplaces™ in Professional Services 2026, INDUS offers a high-performance culture where people are trusted, supported, and empowered to grow.

📌 Penetration Testing Engineer - Senior Associate (Bengaluru)
🏢 Grant Thornton INDUS
📍 Bengaluru