Penetration Tester (Offensive Security)

About the Role:

We're looking for an experienced Penetration Tester to join our security team, focused on full-scope offensive security engagements across web/mobile applications, APIs, AI agents, networks, and cloud environments (AWS/Azure).

Core Responsibilities
Full-Scope Penetration Testing — Conduct manual and automated security assessments on web and mobile applications, APIs, AI agent systems, internal/external networks, and cloud infrastructure (AWS/Azure)
Exploitation & Risk Analysis — Manually exploit identified vulnerabilities to demonstrate real-world business impact, going beyond automated scan results
Reporting & Remediation — Author transparent, actionable technical reports and partner directly with development teams to guide and validate fix implementation




Tooling & Automation — Build and maintain custom scripts (Python, Go, or Bash) to automate testing workflows and bypass modern security defenses
Must-Have Qualifications
Experience: 2+ years of dedicated professional experience in offensive security / ethical hacking
Technical Expertise: Strong working knowledge of the OWASP Top 10, Active Directory attack paths, and industry-standard tooling (Burp Suite Pro, Metasploit, Nmap, Cobalt Strike)
Certifications: OSCP preferred; equivalent certifications (OSWE, OSEP, CRTO) considered a strong plus
Communication: Excellent technical writing skills, with the ability to translate complex vulnerabilities into business risk for non-technical stakeholders

📌 Penetration Tester (Bengaluru)
🏢 Sourcingxpress
📍 Bengaluru