Company Overview

Incedo is a US-based consulting, data science and technology services firm with over 3000 people helping clients from our six offices across US, Mexico and India. We help our clients achieve competitive advantage through end-to-end digital transformation. Our uniqueness lies in bringing together strong engineering, data science, and design capabilities coupled with deep domain understanding. We combine services and products to maximize business impact for our clients in telecom, Banking, Wealth Management, product engineering and life science

& healthcare industries.

Working at Incedo will provide you an prospect to work with industry leading client organizations, deep technology and domain experts, and global teams.

Incedo

University, our learning platform, provides ample learning opportunities starting with a structured onboarding program and carrying throughout various stages of your career. A variety of fun activities is also an integral part of our friendly work environment. Our flexible career paths allow you to grow into a program manager, a technical architect or a domain expert based on your skills and interests.

Our Mission is to enable our clients to maximize business impact from technology by

- Harnessing the transformational impact of emerging technologies
- Bridging the gap between business and technology

Role Description

- Penetration Testing & Vulnerability Assessment:
- Conduct penetration testing across internal and external networks, web applications, cloud environments, and mobile platforms.
- Excellent exposure of static and dynamic analysis of Web applications (SAST, DAST and SCA).
- Identify vulnerabilities, misconfigurations, and weaknesses in systems by simulating real-world attack techniques.
- Perform manual and automated tests to identify and exploit security flaws within complex environments.
- Provide detailed documentation of identified vulnerabilities, their impact, and proposed remediation measures.

- Red Team & Threat Simulation:
- Participate in red team exercises to simulate advanced persistent threats (APTs) and assess the organization's defense mechanisms.
- Collaborate with internal teams to develop threat scenarios and simulate adversarial tactics, techniques,



and procedures (TTPs).
- Identify attack vectors, perform exploitations, and analyze security controls' effectiveness during engagements.

- Tool Development & Research:
- Continuously research emerging vulnerabilities, threats, and attack methods to stay current with the evolving security landscape.
- Develop and maintain custom penetration testing tools, scripts, and automation to enhance testing capabilities and efficiency.
- Contribute to the improvement of internal offensive security methodologies and frameworks.

- Collaboration & Cross-Functional Work:
- Work closely with security operations, network teams, and IT teams to communicate findings and ensure vulnerabilities are remediated.
- Provide recommendations on secure coding practices, security architecture, and implementation of defense-in-depth strategies.
- Assist in developing threat models and risk assessments to prioritize vulnerabilities based on business impact.

- Reporting & Documentation:
- Generate comprehensive, clear, and actionable reports detailing penetration testing activities, vulnerabilities found, and remediation recommendations.
- Present findings to both technical and non-technical stakeholders in a manner that effectively communicates the business impact of security issues.
- Document exploits, proof of concept (PoC), and testing methodologies used during engagements.

- Mentorship & Knowledge Sharing:

- Mentor junior penetration testers and other team members, providing guidance on technical challenges and security methodologies.
- Lead knowledge-sharing sessions to improve the overall skill set of the security team.
- Contribute to the development and improvement of internal training programs on offensive security best practices.

Technical Skills

- Proficiency with penetration testing tools like Burp Suite, Kali Linux, Metasploit, Nmap, and others.




- Strong knowledge of exploit development, vulnerability assessment, and manual testing techniques.
- Expertise in common attack vectors such as SQL injection, Cross-Site Scripting (XSS), Cross-Site Request Forgery (CSRF), privilege escalation, and more.
- Scripting/programming skills in languages such as Python, Bash, Ruby, or PowerShell for automation and tool development.

- Certifications:

- Offensive Security Certified Professional (OSCP), Certified Ethical Hacker (CEH), or equivalent certifications are required.
- Additional certifications such as OSWE, OSCE, CISSP, or CISM are desirable.

- Communication Skills:

- Strong verbal and written communication skills with the ability to convey complex technical findings to diverse stakeholders.
- Ability to create clear, structured reports and presentations detailing security assessments and recommendations.

- Problem Solving & Analytical Skills:

- Strong critical thinking and problem-solving skills to identify and exploit security weaknesses in complex systems.
- Ability to quickly adapt and learn new technologies, tools, and attack techniques.

Nice-to-have skills

- Experience with cloud environments (AWS, Azure, Google Cloud) and conducting penetration tests on cloud platforms.
- Expertise in web application security, API security, mobile application security, and network security.
- Familiarity with modern web technologies such as HTML5, JavaScript, APIs, and cloud-based applications.
- Knowledge of security frameworks such as MITRE ATT&CK;, OWASP Top 10, and other security compliance standards.

Qualifications

- Minimum of 5 years of experience in penetration testing, ethical hacking, or offensive security roles.
- Hands-on experience performing penetration tests on complex systems including networks, web applications, mobile platforms, and cloud environments.
- Familiarity with common penetration testing methodologies and frameworks such as OWASP, NIST, and others.

Company Value

We value diversity at Incedo. We do not discriminate based on race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.

📌 Security-Engineer (Gurugram)
🏢 Incedo
📍 Gurugram