Job Summary

We are seeking an Expert-level Information Security Consultant to drive the ongoing maturity of Fraser Healths penetration testing program. In this role, you will perform end-to-end grey-box penetration tests across a large portfolio of web and API applications while utilizing a secure, browser-based management platform to schedule assessments, track vulnerabilities, and manage remediation lifecycles.
Responsibilities
- Scoping & Sizing: Conduct T-shirt sizing (Small, Medium, Large) and scoping for onboarded applications based on dynamic web pages and user roles.
- Penetration Testing Execution: Execute manual and tool-assisted grey-box penetration tests across approximately Web/API applications, completing testing within defined schedules.
- Engagement Lifecycles: Manage the end-to-end testing lifecycle for each application from kickoff meeting to final sign-off within a defined timeframe.
- In-Depth Vulnerability Assessment: Conduct expert manual assessments covering authentication, session management, MFA bypass, horizontal/vertical privilege escalation,



IDOR/BOLA, API vulnerabilities, and business logic workflow abuses.
- Attack-Path Validation: Chain vulnerabilities into realistic attack paths and perform controlled, non-destructive validation within live healthcare environments without disrupting operational or clinical systems.
- Platform Management: Deploy and operate a browser-based, RBAC/MFA-enabled pen test platform supporting forward scheduling, metric dashboards, report retention, automated notifications, and GRC tool integration.
- Tooling & Setting Setup: Install, configure, and maintain all necessary licensed testing tools inside the client-provided penetration testing machines accessed via the Privileged Access Management (PAM) platform.
- Reporting & Debriefs: Author comprehensive reports with testing methodologies, scorecards, reproducible steps, root-cause analyses, and prioritized remediation guidance, followed by stakeholder pr

📌 Pen test platform Professional (India)
🏢 Workiy Technologies
📍 India