Responsibilities

- Develop, implement and maintain penetration testing, Red Team and offensive security tools for global cybersecurity operations.

- Conduct internal and external penetration tests across infrastructure, applications, networks, cloud and Active Directory environments.

- Develop scripts, automation, frameworks and internal tools to improve the efficiency and scalability of penetration testing activities.

- Conduct proactive Red Team exercises to simulate real-world external adversaries and insider threats.

- Identify vulnerabilities, attack paths and weaknesses in organizational security controls.

- Perform security assessments of third-party services, applications and software.

- Conduct source-code reviews to identify security vulnerabilities and insecure coding practices.

- Develop internal security tools, scripts and automation to improve offensive security capabilities.

- Research new vulnerabilities, attack techniques, tools and exploitation methods.

- Develop proof-of-concepts and exploits to validate vulnerabilities and demonstrate their potential impact.

- Collaborate with the SOC on Purple Team exercises to test and improve detection and response capabilities.

- Document findings in clear, risk-based reports with technical evidence, business impact and actionable remediation guidance.

- Present security findings to both technical and non-technical stakeholders.

- Work with infrastructure, application and IT teams to validate and remediate identified vulnerabilities.

- Evaluate and implement new offensive security tools and technologies to improve the organization's global testing capabilities.

- Continuously improve penetration testing and Red Team methodologies, tooling and capabilities.





- Support the development of the organization's internal offensive security capabilities.

Requirements

- Bachelor's degree in computer science, cybersecurity or a relevant field, or equivalent practical experience.

- Initial professional experience in cybersecurity, penetration testing or offensive security is preferred; motivated early-career candidates with strong practical experience are encouraged to apply.

- Passionate about CTFs, vulnerability research, exploit development, or simply "breaking things" to understand how they work.

- Strong fundamentals in networking, Windows, Linux and Active Directory.

- Positive understanding of common offensive security techniques and attack methodologies.

- Hands-on experience with penetration testing and offensive security tools.

- Ability to understand, reproduce and exploit security vulnerabilities.

- Experience developing security tools, automation, scripts or proof-of-concepts is highly desirable.

- Strong scripting or programming skills using Python, PowerShell, Bash or similar languages.

- Demonstrated interest in offensive security through CTFs, personal projects, GitHub projects, vulnerability research or security communities.

- Strong analytical and problem-solving skills, with a creative approach to identifying attack paths.

- Good communication and technical writing skills, with the ability to explain complex security findings clearly.

- Curiosity, autonomy and a strong willingness to continuously learn and research new attack techniques.

- Experience with web application/API security, cloud security or source-code review is a plus.

- Knowledge of OT/ICS security and industrial environments is a plus.

- Fluent English is required.

- Certifications such as OSCP, PNPT, CRTO or equivalent are a plus.

📌 Cybersecurity Analyst (Internal Penetration Testing) (Chennai)
🏢 Johnson Electric
📍 Chennai