Senior Infrastructure Penetration Tester / Infrastructure Security Consultant –

Job Description
Job Title: Senior Infrastructure Penetration Tester

Experience:
5-10 Years (Senior) / 8-12 Years (Lead) Department: Cyber Security / Offensive Security / Red Team Role Summary We are seeking an experienced Senior Infrastructure Penetration Tester to perform security assessments, vulnerability exploitation, red team exercises, and infrastructure security testing across enterprise on-premises, cloud, network, server, virtualization, and Active Directory environments. The candidate should possess strong expertise in Network Penetration Testing, Active Directory Security, Windows/Linux Security, Cloud Security, Red Team Operations, Vulnerability Assessment, Privilege Escalation, and Security Remediation Consulting.

Key Responsibilities
Infrastructure Penetration Testing
• Perform internal and external network penetration testing.
• Conduct vulnerability assessments and security audits.
• Identify security weaknesses across servers, networks, endpoints, and infrastructure components.
• Validate vulnerabilities through controlled exploitation.
• Perform security assessments for hybrid cloud environments. Active Directory Security Testing
• Conduct Active Directory penetration testing.
• Identify privilege escalation paths and attack chains.
• Assess Kerberos, NTLM, LDAP, Group Policies, and Authentication Security.
• Evaluate Tier-0 assets and privileged access security.
• Perform lateral movement assessments. Tools
• BloodHound
• PingCastle
• Mimikatz
• Impacket
• Rubeus
• PowerView Network Penetration Testing
• Assess routers, switches, firewalls, and network devices.
• Conduct internal and external attack simulations.
• Perform network enumeration and reconnaissance.
• Identify misconfigurations and insecure protocols.
• Assess firewall and segmentation controls. Technologies
• Cisco
• Palo Alto
• Fortinet
• Check Point
• F5
• Load Balancers
• VPN Technologies Cloud Security Assessment
• Perform security assessments of Azure and AWS environments.
• Validate IAM security configurations.
• Assess cloud networking and security controls.
• Review security posture and compliance gaps.
• Conduct privilege escalation testing in cloud environments. Platforms
• Microsoft Azure
• AWS
• Microsoft Entra ID
• AWS IAM
• Defender for Cloud Operating System Security Testing Windows Security
• Windows Server Security Assessment
• Active Directory Security Review
• Group Policy Review
• Privileged Access Assessment
• PowerShell Security Linux Security
• Linux hardening validation
• Privilege escalation testing
• Sudo configuration reviews
• SSH security reviews Vulnerability Management
• Conduct authenticated and unauthenticated scans.
• Validate vulnerabilities identified by scanning tools.
• Perform risk prioritization and remediation recommendations.
• Assist infrastructure teams in vulnerability closure. Tools
• Nessus
• Qualys
• Rapid7 InsightVM
• OpenVAS
• Nexpose Red Team Activities
• Execute red team simulations.
• Emulate real-world threat actors.
• Test detection and response capabilities.
• Assess SOC monitoring effectiveness.
• Validate EDR/XDR security controls. Security Platforms Exposure
• Microsoft Defender for Endpoint
• CrowdStrike Falcon
• SentinelOne
• Microsoft Sentinel
• Splunk Reporting & Remediation
• Develop executive and technical assessment reports.
• Present findings to security leadership and infrastructure teams.
• Provide actionable remediation recommendations.
• Support security improvement initiatives.
• Conduct security awareness sessions for technical teams. Required Technical Skills Infrastructure & Network Security
• TCP/IP
• Routing & Switching
• Firewalls
• VPN Technologies
• IDS/IPS
• Network Segmentation
• DNS, DHCP Security Testing Tools
• Burp Suite Professional
• Nmap
• Metasploit
• Nessus
• Qualys
• Wireshark
• BloodHound
• CrackMapExec
• Responder
• Impacket Operating Systems
• Windows Server
• Linux Administration
• Active Directory
• VMware
• Hyper-V
• Citrix Scripting
• PowerShell
• Python
• Bash
• Automation Scripting Cloud Security
• Azure Security
• AWS Security
• IAM Security
• Entra ID
• Cloud Networking Qualifications
• Bachelor's Degree in Cyber Security, Computer Science, Information Technology, or related field.
• 5-10 years of experience in Penetration Testing, Red Teaming, Security Assessments, or Cyber Security Engineering.
• Strong understanding of attack methodologies and security controls.
• Experience working with enterprise infrastructure environments. Preferred Certifications Offensive Security
• OSCP (Highly Preferred)
• OSCE
• OSEP
• CRTO (Certified Red Team Operator)
• CRTP (Certified Red Team Professional) Security Certifications
• CISSP
• CEH
• GPEN
• GWAPT
• GCIH
• CompTIA Security+ Cloud Certifications
• AZ-500
• AWS Security Specialty Key Competencies
• Infrastructure Penetration Testing
• Active Directory Security
• Red Team Operations
• Network Security Assessments
• Vulnerability Management
• Exploitation Techniques
• Privilege Escalation
• Cloud Security Testing
• Security Architecture Review
• Technical Reporting
• Client & Stakeholder Management Ideal Candidate Profile (Senior Level) A security professional with 5-10 years of experience in Infrastructure Penetration Testing, Active Directory Security, Windows/Linux Administration, Network Security, VMware/Citrix, Azure/AWS Security, Vulnerability Management, Red Teaming, and Security Consulting. The candidate should be capable of independently leading enterprise security assessments, simulating advanced attack scenarios, validating security controls, and providing strategic remediation guidance to global clients. Responsibilities Senior Infrastructure Penetration Tester / Infrastructure Security Consultant –

Job Description
Job Title: Senior Infrastructure Penetration Tester

Experience:
5-10 Years (Senior) / 8-12 Years (Lead) Department: Cyber Security / Offensive Security / Red Team Role Summary We are seeking an experienced Senior Infrastructure Penetration Tester to perform security assessments, vulnerability exploitation, red team exercises, and infrastructure security testing across enterprise on-premises, cloud, network, server, virtualization, and Active Directory environments.



The candidate should possess strong expertise in Network Penetration Testing, Active Directory Security, Windows/Linux Security, Cloud Security, Red Team Operations, Vulnerability Assessment, Privilege Escalation, and Security Remediation Consulting.

Key Responsibilities
Infrastructure Penetration Testing
• Perform internal and external network penetration testing.
• Conduct vulnerability assessments and security audits.
• Identify security weaknesses across servers, networks, endpoints, and infrastructure components.
• Validate vulnerabilities through controlled exploitation.
• Perform security assessments for hybrid cloud environments. Active Directory Security Testing
• Conduct Active Directory penetration testing.
• Identify privilege escalation paths and attack chains.
• Assess Kerberos, NTLM, LDAP, Group Policies, and Authentication Security.
• Evaluate Tier-0 assets and privileged access security.
• Perform lateral movement assessments. Tools
• BloodHound
• PingCastle
• Mimikatz
• Impacket
• Rubeus
• PowerView Network Penetration Testing
• Assess routers, switches, firewalls, and network devices.
• Conduct internal and external attack simulations.
• Perform network enumeration and reconnaissance.
• Identify misconfigurations and insecure protocols.
• Assess firewall and segmentation controls. Technologies
• Cisco
• Palo Alto
• Fortinet
• Check Point
• F5
• Load Balancers
• VPN Technologies Cloud Security Assessment
• Perform security assessments of Azure and AWS environments.
• Validate IAM security configurations.
• Assess cloud networking and security controls.
• Review security posture and compliance gaps.
• Conduct privilege escalation testing in cloud environments. Platforms
• Microsoft Azure
• AWS
• Microsoft Entra ID
• AWS IAM
• Defender for Cloud Operating System Security Testing Windows Security
• Windows Server Security Assessment
• Active Directory Security Review
• Group Policy Review
• Privileged Access Assessment
• PowerShell Security Linux Security
• Linux hardening validation
• Privilege escalation testing
• Sudo configuration reviews
• SSH security reviews Vulnerability Management
• Conduct authenticated and unauthenticated scans.
• Validate vulnerabilities identified by scanning tools.
• Perform risk prioritization and remediation recommendations.
• Assist infrastructure teams in vulnerability closure. Tools
• Nessus
• Qualys
• Rapid7 InsightVM
• OpenVAS
• Nexpose Red Team Activities
• Execute red team simulations.
• Emulate real-world threat actors.
• Test detection and response capabilities.
• Assess SOC monitoring effectiveness.
• Validate EDR/XDR security controls. Security Platforms Exposure
• Microsoft Defender for Endpoint
• CrowdStrike Falcon
• SentinelOne
• Microsoft Sentinel
• Splunk Reporting & Remediation
• Develop executive and technical assessment reports.
• Present findings to security leadership and infrastructure teams.
• Provide actionable remediation recommendations.
• Support security improvement initiatives.
• Conduct security awareness sessions for technical teams. Required Technical Skills Infrastructure & Network Security
• TCP/IP
• Routing & Switching
• Firewalls
• VPN Technologies
• IDS/IPS
• Network Segmentation
• DNS, DHCP Security Testing Tools
• Burp Suite Professional
• Nmap
• Metasploit
• Nessus
• Qualys
• Wireshark
• BloodHound
• CrackMapExec
• Responder
• Impacket Operating Systems
• Windows Server
• Linux Administration
• Active Directory
• VMware
• Hyper-V
• Citrix Scripting
• PowerShell
• Python
• Bash
• Automation Scripting Cloud Security
• Azure Security
• AWS Security
• IAM Security
• Entra ID
• Cloud Networking Qualifications
• Bachelor's Degree in Cyber Security, Computer Science, Information Technology, or related field.
• 5-10 years of experience in Penetration Testing, Red Teaming, Security Assessments, or Cyber Security Engineering.
• Strong understanding of attack methodologies and security controls.
• Experience working with enterprise infrastructure environments. Preferred Certifications Offensive Security
• OSCP (Highly Preferred)
• OSCE
• OSEP
• CRTO (Certified Red Team Operator)
• CRTP (Certified Red Team Professional) Security Certifications
• CISSP
• CEH
• GPEN
• GWAPT
• GCIH
• CompTIA Security+ Cloud Certifications
• AZ-500
• AWS Security Specialty Key Competencies
• Infrastructure Penetration Testing
• Active Directory Security
• Red Team Operations
• Network Security Assessments
• Vulnerability Management
• Exploitation Techniques
• Privilege Escalation
• Cloud Security Testing
• Security Architecture Review
• Technical Reporting
• Client & Stakeholder Management Ideal Candidate Profile (Senior Level) A security professional with 5-10 years of experience in Infrastructure Penetration Testing, Active Directory Security, Windows/Linux Administration, Network Security, VMware/Citrix, Azure/AWS Security, Vulnerability Management, Red Teaming, and Security Consulting. The candidate should be capable of independently leading enterprise security assessments, simulating advanced attack scenarios, validating security controls, and providing strategic remediation guidance to global clients. Qualifications Senior Infrastructure Penetration Tester / Infrastructure Security Consultant –

Job Description
Job Title: Senior Infrastructure Penetration Tester

Experience:
5-10 Years (Senior) / 8-12 Years (Lead) Department: Cyber Security / Offensive Security / Red Team Role Summary We are seeking an experienced Senior Infrastructure Penetration Tester to perform security assessments, vulnerability exploitation, red team exercises, and infrastructure security testing across enterprise on-premises, cloud, network, server, virtualization, and Active Directory environments. The candidate should possess strong expertise in Network Penetration Testing, Active Directory Security, Windows/Linux Security, Cloud Security, Red Team Operations,



Vulnerability Assessment, Privilege Escalation, and Security Remediation Consulting.

Key Responsibilities
Infrastructure Penetration Testing
• Perform internal and external network penetration testing.
• Conduct vulnerability assessments and security audits.
• Identify security weaknesses across servers, networks, endpoints, and infrastructure components.
• Validate vulnerabilities through controlled exploitation.
• Perform security assessments for hybrid cloud environments. Active Directory Security Testing
• Conduct Active Directory penetration testing.
• Identify privilege escalation paths and attack chains.
• Assess Kerberos, NTLM, LDAP, Group Policies, and Authentication Security.
• Evaluate Tier-0 assets and privileged access security.
• Perform lateral movement assessments. Tools
• BloodHound
• PingCastle
• Mimikatz
• Impacket
• Rubeus
• PowerView Network Penetration Testing
• Assess routers, switches, firewalls, and network devices.
• Conduct internal and external attack simulations.
• Perform network enumeration and reconnaissance.
• Identify misconfigurations and insecure protocols.
• Assess firewall and segmentation controls. Technologies
• Cisco
• Palo Alto
• Fortinet
• Check Point
• F5
• Load Balancers
• VPN Technologies Cloud Security Assessment
• Perform security assessments of Azure and AWS environments.
• Validate IAM security configurations.
• Assess cloud networking and security controls.
• Review security posture and compliance gaps.
• Conduct privilege escalation testing in cloud environments. Platforms
• Microsoft Azure
• AWS
• Microsoft Entra ID
• AWS IAM
• Defender for Cloud Operating System Security Testing Windows Security
• Windows Server Security Assessment
• Active Directory Security Review
• Group Policy Review
• Privileged Access Assessment
• PowerShell Security Linux Security
• Linux hardening validation
• Privilege escalation testing
• Sudo configuration reviews
• SSH security reviews Vulnerability Management
• Conduct authenticated and unauthenticated scans.
• Validate vulnerabilities identified by scanning tools.
• Perform risk prioritization and remediation recommendations.
• Assist infrastructure teams in vulnerability closure. Tools
• Nessus
• Qualys
• Rapid7 InsightVM
• OpenVAS
• Nexpose Red Team Activities
• Execute red team simulations.
• Emulate real-world threat actors.
• Test detection and response capabilities.
• Assess SOC monitoring effectiveness.
• Validate EDR/XDR security controls. Security Platforms Exposure
• Microsoft Defender for Endpoint
• CrowdStrike Falcon
• SentinelOne
• Microsoft Sentinel
• Splunk Reporting & Remediation
• Develop executive and technical assessment reports.
• Present findings to security leadership and infrastructure teams.
• Provide actionable remediation recommendations.
• Support security improvement initiatives.
• Conduct security awareness sessions for technical teams. Required Technical Skills Infrastructure & Network Security
• TCP/IP
• Routing & Switching
• Firewalls
• VPN Technologies
• IDS/IPS
• Network Segmentation
• DNS, DHCP Security Testing Tools
• Burp Suite Professional
• Nmap
• Metasploit
• Nessus
• Qualys
• Wireshark
• BloodHound
• CrackMapExec
• Responder
• Impacket Operating Systems
• Windows Server
• Linux Administration
• Active Directory
• VMware
• Hyper-V
• Citrix Scripting
• PowerShell
• Python
• Bash
• Automation Scripting Cloud Security
• Azure Security
• AWS Security
• IAM Security
• Entra ID
• Cloud Networking Qualifications
• Bachelor's Degree in Cyber Security, Computer Science, Information Technology, or related field.
• 5-10 years of experience in Penetration Testing, Red Teaming, Security Assessments, or Cyber Security Engineering.
• Strong understanding of attack methodologies and security controls.
• Experience working with enterprise infrastructure environments. Preferred Certifications Offensive Security
• OSCP (Highly Preferred)
• OSCE
• OSEP
• CRTO (Certified Red Team Operator)
• CRTP (Certified Red Team Qualified) Security Certifications
• CISSP
• CEH
• GPEN
• GWAPT
• GCIH
• CompTIA Security+ Cloud Certifications
• AZ-500
• AWS Security Specialty Key Competencies
• Infrastructure Penetration Testing
• Active Directory Security
• Red Team Operations
• Network Security Assessments
• Vulnerability Management
• Exploitation Techniques
• Privilege Escalation
• Cloud Security Testing
• Security Architecture Review
• Technical Reporting
• Client & Stakeholder Management Ideal Candidate Profile (Senior Level) A security professional with 5-10 years of experience in Infrastructure Penetration Testing, Active Directory Security, Windows/Linux Administration, Network Security, VMware/Citrix, Azure/AWS Security, Vulnerability Management, Red Teaming, and Security Consulting. The candidate should be capable of independently leading enterprise security assessments, simulating advanced attack scenarios, validating security controls, and providing strategic remediation guidance to global clients. At Zensar, we’re “experience-led everything”. We are committed to conceptualizing, designing, engineering, marketing, and managing digital solutions and experiences for over 130 leading enterprises. We are a company driven by a bold purpose: Together, we shape experiences for better futures. Whether for our clients, our people, or the world around us, this belief powers everything we do. At the heart of our culture is ONE with Client
- a set of four core values that reflect who we are and how we work: One Zensar, Nurturing, Empowering, and Client Focus. Part of the $4.8 billion RPG Group, we’re a community of 10,000+ innovators across 30+ global locations, including Milpitas, Seattle, Princeton, Cape Town, London, Zurich, Singapore, and Mexico City. Explore Life at Zensar and join us to Grow. Own. Achieve. Learn. to be the best version of yourself. We believe the best work happens when individuality is celebrated, growth is encouraged, and well-being is prioritized. We are an equal employment opportunity (EEO) and affirmative action employer, committed to creating an inclusive workplace. All qualified applicants will be considered without regard to race, creed, color, ancestry, religion, sex, national origin, citizenship, age, sexual orientation, gender identity, disability, marital status, family medical leave status, or protected veteran status.

📌 Penetration Test Infra (Pune)
🏢 Zensar
📍 Pune