As a Penetration Testing Engineer at Grant Thornton, you will conduct advanced security assessments across applications, networks, cloud environments, and enterprise systems. You will emulate real-world attack scenarios, identify vulnerabilities, and collaborate with engineering and client teams to remediate risks. This role requires a balance of technical expertise, consulting skills, and strong communication.

Plan & Execute Penetration Tests: Perform authorized tests on web applications, APIs, cloud platforms (AWS/Azure/GCP), and internal networks following industry standards (PTES, NIST 800-115, OSSTMM).Reporting & Advisory: Deliver clear, actionable reports with risk ratings, exploit narratives, and remediation guidance tailored for technical and executive audiences.

Client Engagement: Work directly with clients to scope engagements, explain findings, and advise on secure design and preventive controls.Tooling & Automation: Develop scripts and tools (Python, PowerShell, Bash) to streamline testing and reporting processes.

Continuous Improvement: Contribute to internal methodologies, playbooks,



and secure SDLC practices; mentor junior team members.

Required Qualifications

Experience: 4+ years in penetration testing or offensive security.

Technical Skills

Web/API testing (OWASP Top 10, ASVS)

Cloud security (AWS/Azure/GCP misconfigurations, IAM)

Network/Active Directory assessments

Familiarity with containers/Kubernetes security

Tools: Burp Suite Pro, Nmap, Metasploit, Kali Linux, Wireshark, Nessus/OpenVAS.

Scripting: Python, PowerShell, Bash (Go is a plus).

Frameworks & Standards: PTES, NIST 800-115, MITRE ATT&CK;, OWASP.

Certifications (Preferred): OSCP, OSWE, OSEP, GPEN, GXPN, eCPPT.

Preferred Qualifications

Consulting experience with client-facing communication.

Familiarity with compliance frameworks (SOC 2, ISO 27001, PCI DSS).

Ability to translate technical findings into business risk language.

Soft Skills

Solid communication and presentation skills.

Ability to manage multiple engagements and deadlines.

Ethical mindset and strict adherence to authorized testing boundaries.

📌 Penetration Testing Engineer - Senior Associate (Bengaluru)
🏢 Grant Thornton INDUS
📍 Bengaluru