Senior Security Consultant – Penetration Testing & Security AutomationFull-time contract | Remote, India | ₹16–22 lakh per year

Independent contractor engagement; no employee perks.

About Symosis Security

Symosis Security is a Silicon Valley cybersecurity consulting and engineering firm with delivery teams in the US and India. We help enterprise and public-sector clients assess risk, test defenses, and improve security across applications, cloud platforms, identity, and AI systems.

We’re looking for a hands-on penetration tester who can independently deliver engagements, identify exploitable weaknesses, and produce clear, client-ready reports.

What you’ll do

- Conduct web application, API, and internal/external network penetration tests.
- Manually validate vulnerabilities, test authorization and business logic, and document exploitation evidence.
- Perform Android/iOS testing and authorized adversary simulations based on experience and engagement scope.
- Own testing activities from scope review and execution through reporting, findings walkthroughs, and remediation retesting.
- Build scripts and utilities to improve testing efficiency using Python, PowerShell, Bash, and APIs.
- Use Claude, Codex, GitHub Copilot, or similar tools while reviewing and validating generated code.

Essential qualifications

- 4+ years of hands-on penetration testing experience.




- Ability to independently deliver web/API and network penetration tests beyond automated scanning.
- Strong understanding of authentication, authorization, business logic, common application vulnerabilities, and network exploitation.
- Practical experience with Burp Suite, Nmap, and relevant testing tools.
- Ability to write or modify scripts and troubleshoot technical issues.
- Strong written English and client-ready reporting skills.
- At least one relevant certification: OSCP, OSEP, eCPPT, eWPT/eWPTX, GPEN, GWAPT, CEH Practical, or comparable certification.

Preferred qualifications

- Android/iOS or thick-client penetration testing.
- Active Directory assessments and authorized red team engagements.
- Source-code review, cloud security testing, or AI application security testing.
- Additional certifications such as CISSP or CEH.

How to apply

Apply through LinkedIn and email [email protected] with:

- Résumé, certifications, notice period, and expected annual contract fee.
- A short description of an engagement you independently delivered.
- Sanitized web, network, and mobile report samples for the areas you have tested. A self-created sample is acceptable; do not share confidential client information.
- An example of a testing script or automation you developed.

📌 Senior Security Consultant – Penetration Testing & Security Automation (India)
🏢 Symosis Security
📍 India