Position: Infra Penetration Testing

Location: Navi Mumbai

Duration: Contract to Hire

Job Description:

Experience: Min 3 - 8 years hands-on experience

Tech-Stack & Skills:

• Metasploit / Cobalt Strike / Kali Linux – infrastructure penetration testing, exploitation frameworks & post-exploitation techniques

• Tenable.io / Tenable.SC / Nessus – vulnerability validation, exploit confirmation & remediation revalidation scanning

• Nmap / Masscan / Shodan / Censys – network reconnaissance, service enumeration, exposed-service identification & attack-surface mapping

• Active Directory Security (BloodHound / Impacket / Mimikatz / Rubeus) – AD attack-path analysis, Kerberoasting & privilege escalation

• Password Auditing (Hashcat / John the Ripper / Hydra / CrackMapExec) – credential assessment & weak-password validation





• Threat Intelligence Platforms (MISP / Recorded Future / Mandiant) – exploit-intel correlation, advisory-driven PT & threat-informed testing

• Attack Surface Management (Mandiant ASM / Censys / ProjectDiscovery) – external exposure analysis & attack-path refinement

• Python / Bash / PowerShell – custom exploit scripting, PT automation & secure PoC development

• MITRE ATT&CK; / PTES / OSSTMM / NIST SP 800-115 – TTP mapping, adversary emulation & structured PT methodology

• CVSS v3.1 / EPSS – risk-based finding prioritization, executive reporting & purple team coordination with SOC

📌 Infra Penetration Testing @ Mumbai (Navi Mumbai)
🏢 Quess IT Staffing
📍 Navi Mumbai