We are seeking a motivated and detail-oriented Security Penetration Testing Consultant with 2-3 years of hands-on experience performing security assessments and penetration tests. The ideal candidate combines strong technical security skills with clear communication, sound judgment, and a collaborative consulting mindset. This role supports client engagements by identifying vulnerabilities, explaining risk in plain language, and providing practical remediation guidance.

KEY RESPONSIBILITIES

- Conduct penetration testing of external and internal networks, web applications, APIs, cloud environments, wireless networks, and mobile applications when applicable.
- Perform vulnerability assessments and validate identified security weaknesses using manual and automated techniques.
- Document findings with business impact, risk ratings, supporting evidence, and clear remediation guidance.
- Present results to technical and non-technical stakeholders in a professional and understandable manner.
- Support remediation validation, retesting, red team, purple team, and security validation activities as needed.
- Stay current with emerging threats, attack techniques, testing tools, and security technologies.

REQUIRED QUALIFICATIONS

- Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or equivalent work experience.
- 2-3 years of experience in penetration testing, ethical hacking, vulnerability assessment, or offensive security.
- Hands-on experience with tools such as Burp Suite, Nmap, Nessus, Metasploit, Wireshark, and Kali Linux toolsets.




- Working knowledge of OWASP Top 10, MITRE ATT&CK;, network security, application security, and common attack techniques.
- Ability to write clear, concise, and professional technical reports.

SOFT SKILLS & TEAM COLLABORATION

- Communicates clearly, respectfully, and confidently with clients, teammates, and project stakeholders.
- Explains complex technical concepts in plain language and connects findings to business risk.
- Works effectively in a team environment, including peer review of findings, reports, and testing approaches.
- Builds trust through responsiveness, professionalism, follow-through, and sound handling of sensitive information.
- Accepts and provides constructive feedback in a practical, professional, and improvement-focused way.
- Demonstrates curiosity, adaptability, accountability, and a strong commitment to continuous learning.

PREFERRED QUALIFICATIONS

- Certifications such as Security+, PenTest+, eJPT, PNPT, CEH, or OSCP.
- Experience testing Azure, AWS, or Google Cloud environments.
- Familiarity with Python, PowerShell, or Bash scripting.
- Experience with Active Directory security assessments.
- Prior client-facing consulting, project delivery, or skilled services experience.

SUCCESS FACTORS

- Takes ownership of deliverables and meets commitments.
- Balances technical depth with practical, client-ready recommendations.
- Contributes to service improvement, team knowledge sharing, and mentoring opportunities.

NOTE A hands-on technical proficiency test may be required as part of the interview process

📌 Security Penetration Testing Consultant (Bengaluru)
🏢 Withum
📍 Bengaluru