Penetration Tester (Offensive Security)

About the Role:

We're looking for an experienced Penetration Tester to join our security team, focused on full-scope offensive security engagements across web/mobile applications, APIs, AI agents, networks, and cloud environments (AWS/Azure).

Core Responsibilities

- Full-Scope Penetration Testing — Conduct manual and automated security assessments on web and mobile applications, APIs, AI agent systems, internal/external networks, and cloud infrastructure (AWS/Azure)
- Exploitation & Risk Analysis — Manually exploit identified vulnerabilities to demonstrate real-world business impact, going beyond automated scan results
- Reporting & Remediation — Author clear, actionable technical reports and partner directly with development teams to guide and validate fix implementation




- Tooling & Automation — Build and maintain custom scripts (Python, Go, or Bash) to automate testing workflows and bypass modern security defenses

Must-Have Qualifications

- Experience: 2+ years of dedicated professional experience in offensive security / ethical hacking
- Technical Expertise: Strong working knowledge of the OWASP Top 10, Active Directory attack paths, and industry-standard tooling (Burp Suite Pro, Metasploit, Nmap, Cobalt Strike)
- Certifications: OSCP preferred; equivalent certifications (OSWE, OSEP, CRTO) considered a robust plus
- Communication: Excellent technical writing skills, with the ability to translate complex vulnerabilities into business risk for non-technical stakeholders

📌 Penetration Tester (Bengaluru)
🏢 Sourcingxpress
📍 Bengaluru