Security Engineer – Penetration Testing, SOC & AutomationFull-time contract | Remote, India | ₹12–14 lakh per year
Independent contractor engagement; no employee benefits.
About Symosis SecuritySymosis Security is a cybersecurity consulting and engineering firm based in Silicon Valley, with delivery teams in the US and India. We help enterprise and public-sector clients assess risk, test defenses, and implement security improvements across applications, cloud platforms, identity, and AI systems.
We’re looking for a hands-on security engineer who can independently deliver penetration tests, investigate production security issues, and build practical automation. You’ll work directly with senior practitioners and take ownership of client deliverables.
What you’ll do
- Penetration testing — approximately 40%: Conduct web application, API, and internal/external network penetration tests. Validate findings manually, recommend practical fixes, and perform remediation retesting.
- MSSP / SOC / NOC — approximately 30%: Investigate escalated alerts, support incident response and threat hunting, troubleshoot endpoint and network issues, and maintain security monitoring platforms.
- AI and security automation — approximately 20%: Build Python/PowerShell utilities, integrate security platforms through APIs, and use AI coding tools to improve testing and operational workflows.
- Reporting and coordination — approximately 10%: Produce client-ready reports, document investigations and procedures, and communicate progress and findings.
Essential qualifications
- 5+ years of relevant hands-on cybersecurity experience, including both penetration testing and production security operations.
- Ability to independently deliver web/API and network penetration tests,
including manual exploitation, evidence collection, reporting, and retesting.
- Experience investigating security alerts and incidents beyond dashboard monitoring and ticket forwarding.
- Hands-on experience with at least one of Microsoft Sentinel/Defender, CrowdStrike, or Rapid7.
- Practical Python or PowerShell coding skills, including debugging scripts, working with REST APIs, and automating security workflows.
- Experience using Claude, Codex, GitHub Copilot, or similar AI coding tools, with the ability to explain, review, debug, and validate generated code.
- Strong written English, explicit technical documentation, and client-ready reporting skills.
- Ability to own assigned work from scoping through delivery and closure.
Preferred qualifications
- OSCP, OSEP, GPEN, GWAPT, CEH Practical, or a comparable practical security certification.
- CISSP, CEH, or additional relevant security certifications.
- Microsoft Entra ID, Active Directory, Azure, and Microsoft 365 security experience.
- Detection engineering, SIEM tuning, and security platform integrations.
- Android/iOS penetration testing or authorized red team experience.
Demonstrated testing, investigation, and coding ability will carry more weight than certifications alone. How to applyApply through LinkedIn and email
[email protected] with:
- Your résumé, certifications, notice period, and expected annual contract fee.
- A brief example of a penetration test you independently delivered.
- A brief example of a production security incident you investigated.
- One security tool or automation you built: what it does, the technologies used, and how you validated it.
- A sanitized sample finding or report, if available. A self-created sample is welcome; do not share confidential client information.
📌 Security Engineer – Penetration Testing, SOC & Automation (India)
🏢 Symosis Security
📍 India