Role Summary:

We are seeking an experienced and driven Senior Penetration Tester to lead complex security assurance engagements, perform advanced offensive security assessments, and help shape our long-term testing strategies.

In this role, you will be instrumental in mentoring team members and strengthening our security posture across multi-faceted environments, including modern web and mobile apps, complex infrastructure, cloud ecosystems, and emerging AI/ML systems.

Key Responsibilities:

- Offensive Security &
- Execution: Lead and independently execute highly technical penetration testing and advanced security assurance engagements.
- Methodology &
- Strategy: Design, implement, and optimize cutting-edge penetration testing methodologies aligned with business objectives.
- Contribute to the mid- and long-term Security Assurance strategy.

Specialized Testing Domains:

- Web Application &
- API Security Testing
- Mobile Application Security Testing (iOS/Android)
- Infrastructure &
- Cloud Security Testing (AWS/Azure/GCP)
- Purple Team Assessments

AI/ML &

- LLM Security:
- Assess AI-powered systems, Large Language Models (LLMs), and AI-assisted developer tools.
- Identify AI-specific vectors such as prompt injection, data poisoning, and model abuse.

Threat Modeling &

- Risk:
- Perform expert-level threat modeling and provide robust, actionable remediation guidance balancing risk, technical landscape,



and business roadmaps.

Vendor &

- Stakeholder Management:
- Manage third-party penetration testing vendors, optimize engagement value/budgets, and bridge communication between technical teams and executive stakeholders.

Leadership &

- Mentorship:
- Mentor junior and mid-level security engineers, identify capability gaps, and conduct enablement training for developers on modern vulnerability identification.

Required Technical &

- Soft Expertise:
- Advanced Offensive Tactics: Threat modeling, web/API, mobile, cloud/infrastructure pentesting, and purple teaming.
- Emerging Technologies: Proven understanding or hands-on experience in AI/ML security and LLM vulnerability assessment.
- Leadership &
- Strategy: Demonstrated experience in security strategy, defining testing standards, and mentoring technical teams.
- Communication: Excellent technical report writing and executive-level risk communication capabilities.

Preferred Qualifications:

- Extensive hands-on background in offensive security, vulnerability management, and security assurance within fast-paced enterprise environments.
- Industry-recognized certifications (e.g., OSCP, OSCE, GPEN, GWAPT, CISSP) are a strong plus.
- Exceptional stakeholder management skills with a team-oriented approach to cross-functional security initiatives.

📌 Norwin Technologies - Senior Penetration Tester (India)
🏢 Norwin Technologies
📍 India