Role & responsibilities

3+ years of hands-on penetration testing or offensive security experience, including lead responsibility on engagements. • Demonstrated depth in application and API security testing, including manual exploitation of authorization, business logic, and injection classes. • Solid cloud penetration testing experience in at least one major provider, including identity-based attack paths. • Practical exploit development or custom tooling ability, with fluency in at least one scripting or programming language. • Working command of MITRE ATT&CK; and the ability to map testing activity to real adversary tradecraft. • Report writing that stands up to engineering scrutiny: precise, reproducible, and free of inflated severity. • Sound ethical judgment and disciplined adherence to scope, authorization, and data handling requirements.

Preferred Qualifications





Experience testing commercial software products rather than only internal enterprise environments. • Red team or adversary emulation experience, including evasion and detection-aware operating. • Purple team experience working directly with defenders to improve detection content. • Experience testing AI and LLM systems, with familiarity with the OWASP LLM Top 10 and MITRE ATLAS. • Published research, CVE credits, tooling contributions, or conference presentations. • Certifications valued but not required: OSCP, OSWE, OSEP, OSCE3, CRTO, GPEN, GXPN, or GWAPT. HCL Software is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.

📌 Penetration Tester (Hyderabad)
🏢 HCLTech
📍 Hyderabad