Senior Penetration TesterCompany: Comply Strike LLP Employment Type: Full-time
Location:
India (Remote) Availability: Immediate joiners preferred Project Opportunity: International cybersecurity engagement in Qatar, November–December 2026 Company DescriptionComply Strike LLP is a cybersecurity services firm specializing in penetration testing, red teaming, infrastructure security assessments, and enterprise security consulting. We help organizations identify security weaknesses, validate real-world attack scenarios, and strengthen their security posture through practical, risk-driven assessments. Our team works on challenging security engagements involving enterprise networks, Active Directory environments, critical infrastructure, and specialized systems. Role DescriptionComply Strike LLP is looking for an experienced Senior Penetration Tester with strong hands-on expertise in internal infrastructure penetration testing, Active Directory security assessments, and red team operations. The successful candidate will conduct authorized security assessments of enterprise environments, identify and validate security weaknesses, assess privilege escalation and lateral movement paths, and demonstrate the potential business impact of vulnerabilities. Experience in kiosk/ATM security testing, breakout assessments, and restricted-environment security testing will be highly advantageous for this engagement. The role also involves developing attack paths in controlled environments, documenting findings, presenting technical evidence, and providing actionable remediation recommendations to clients.
Key Responsibilities
• Conduct internal infrastructure penetration tests across enterprise networks and Windows environments.
• Perform Active Directory assessments, including domain enumeration, Kerberos security testing, privilege escalation, and lateral movement.
• Execute authorized red team exercises and adversary simulations to evaluate enterprise security controls.
• Assess Windows domains, domain controllers,
authentication mechanisms, access controls, and security configurations.
• Conduct kiosk/ATM security testing and breakout assessments, where applicable to the engagement.
• Identify and validate network vulnerabilities, exposed services, weak credentials, and security misconfigurations.
• Assess attack paths between network segments and evaluate the effectiveness of network segmentation.
• Perform post-exploitation validation and assess the impact of compromised systems within the approved scope.
• Use industry-standard security tools and custom scripts to support assessment activities.
• Prepare detailed technical reports with evidence, risk ratings, impact assessments, and remediation guidance.
• Communicate findings to technical teams and client stakeholders.
• Collaborate with team members to improve testing methodologies and assessment quality. Required Technical SkillsCandidates must demonstrate practical experience in:
• Internal Infrastructure Penetration Testing
• Active Directory Penetration Testing
• Red Teaming and Adversary Simulation
• Windows privilege escalation and lateral movement
• Domain enumeration, Kerberos, SMB, LDAP, and Windows authentication
• Network reconnaissance, service enumeration, and vulnerability validation
• Enterprise infrastructure security assessment
• Security misconfiguration identification and exploitation
• Technical reporting and remediation recommendations Relevant tools: Nmap, BloodHound, NetExec/CrackMapExec, Impacket, Responder, Metasploit, Burp Suite, and other relevant infrastructure assessment tools. Preferred Qualifications
• Practical experience in kiosk/ATM security testing and breakout assessments.
• Experience assessing restricted or segmented enterprise environments.
• Experience conducting complex internal penetration tests and multi-stage attack simulations.
• Relevant certifications such as OSCP, OSEP, CRTP, CRTO, CPENT, or equivalent practical expertise.
• Strong troubleshooting, documentation, communication, and client-facing skills.
• Ability to work independently and collaborate effectively in a remote team. Engagement and Benefits
• Full-time remote employment based in India.
• Chance to participate in international cybersecurity engagements.
• For the Qatar engagement scheduled for November–December 2026, candidates must be available for on-site deployment for the required contract period.
• Visa arrangements, travel expenses, and accommodation for the Qatar assignment will be covered by the organization, subject to the engagement arrangements.
• Opportunities to work on enterprise infrastructure penetration testing and advanced red team assessments.
How to Apply
Interested candidates should share their updated CV along with the following details:
• Total years of penetration testing experience.
• Relevant experience in internal infrastructure testing, Active Directory, and red teaming.
• Kiosk/ATM security testing experience, if applicable.
• Current location and earliest joining date.
• Availability for an on-site Qatar assignment in November–December 2026, if applicable.
• Expected salary or contract rate. Email:
[email protected] WhatsApp: +91 91033 79606 Comply Strike LLP welcomes technically strong security professionals who can demonstrate practical penetration testing skills and deliver high-quality assessment results.
• Candidates will be evaluated on relevant hands-on experience, technical depth, and their ability to communicate security findings effectively.
📌 Senior Penetration Tester (India)
🏢 Complystrike
📍 India