Job Description
Senior Penetration Tester
nHCL Software | Office of the CISO
nLocation: India - Bangalore / Noida / Remote
nType: Full time
nAbout the Role
nHCL Software is seeking a Senior Penetration Tester to perform Continuous Threat Exposure
nManagement (CTEM) and offensive security testing across our products and infrastructure. This
nrole focuses on continuous attack surface discovery, attack path analysis, and risk-based
nprioritization to identify and remediate weaknesses across our application, cloud, and identity attack
nsurface before they can be exploited.
nWe are looking for a tester who produces findings engineering teams can actually act on, and who
ncares about whether issues get fixed rather than only whether they get reported.
nYou will work with Product Security, PSIRT, Security Operations, and engineering teams, and your
nfindings will feed directly into remediation roadmaps and customer-facing assurance.
nKey Responsibilities
n• Plan and execute penetration tests across web and thick-client applications, APIs, cloud
nenvironments,



internal networks, and identity infrastructure.
n• Perform deep manual testing that goes well beyond automated tooling, including business logic
nabuse, authorization flaws, and chained exploitation.
n• Develop custom tooling, scripts, and proof-of-concept exploits where off-the-shelf tooling is
ninsufficient.
n• Define scope, rules of engagement, and safety controls, and operate within them rigorously.
nContinuous Threat Exposure Management (CTEM) & Attack Path Analysis
nOffensive Testing & Execution
n• Lead continuous attack surface discovery across cloud, on-prem, identity, and application
nenvironments to identify exposed assets and security misconfigurations.
n• Perform attack path analysis to map potential exploitation chains across AWS, Azure, GCP,
nand hybrid environments, evaluating identity-based lateral movement and privilege escalation
nrisks.
n• Prioritize discovered exposures

📌 Penetration Tester (Bengaluru)
🏢 HCLSoftware
📍 Bengaluru