Penetration Tester 1 Year Experience (Location: India)

We are looking for a Penetration Tester with around 1 year of hands-on experience in application security testing and external attack surface assessment.

Key Responsibilities

- Perform application penetration testing across web applications, APIs, and mobile applications.
- Identify security vulnerabilities related to authentication, authorization, session management, input validation, business logic, data exposure, and security misconfigurations.
- Assess applications against relevant security standards and methodologies such as the OWASP Top 10, OWASP API Security Top 10, and OWASP Mobile Security guidelines.
- Perform manual and tool-assisted penetration testing using commonly used security testing tools.
- Conduct OSINT and external attack surface assessments to identify internet-facing assets and publicly exposed information associated with the organization.
- Identify domains, subdomains, IP addresses, applications, services, and other externally exposed assets.
- Validate identified vulnerabilities and determine their potential security impact.
- Prepare clear penetration testing reports with findings, evidence, risk ratings, and remediation recommendations.
- Perform retesting to verify remediation of identified vulnerabilities.




- Support senior team members during penetration testing and security assessment activities.

Required Skills

- Around 1 year of experience in penetration testing or application security.
- Good understanding of web, API, and mobile application security concepts.
- Familiarity with common application security vulnerabilities and OWASP security risks.
- Hands-on experience with tools such as Burp Suite, Nmap, and other commonly used penetration testing and reconnaissance tools.
- Basic understanding of HTTP/HTTPS, REST APIs, authentication mechanisms, networking, and operating systems.
- Familiarity with OSINT, reconnaissance, and external attack surface discovery techniques.
- Basic scripting knowledge using Python, Bash, or PowerShell is an advantage.
- Positive analytical, documentation, and communication skills.

Preferred

- Exposure to application security testing tools and methodologies across different platforms.
- Familiarity with Linux and common security testing environments.
- Relevant cybersecurity certifications or practical penetration testing training are advantageous but not mandatory (Example: OSCP, CRTP, BSCP (Burp Suite Certified Professional), eWAPT, eWAPTx etc)Role & responsibilities

Preferred candidate profile

📌 Penetration Tester 1 Year Experience Location WFH India
🏢 Diyar United
📍 India