Responsibilities:

- Perform comprehensive penetration tests across various environments, including web applications, mobile applications, network infrastructure, cloud platforms, and APIs.

- Conduct vulnerability research and exploit development to assess the true impact of identified weaknesses.

- Develop and implement custom tools, scripts, and methodologies to enhance penetration testing capabilities.

- Collaborate with development, operations, and security teams to communicate findings, recommend remediation strategies, and validate fixes.

- Lead red team exercises and adversarial simulations to evaluate organizational defenses and incident response capabilities.

- Stay current with emerging threats, vulnerabilities, and security technologies, incorporating new insights into testing approaches.

- Mentor junior security engineers and contribute to the development of internal security best practices.

- Prepare detailed technical reports and executive summaries outlining findings, risks, and recommendations.

- Participate in security architecture reviews to provide proactive security input

What are we looking for?

We want strong collaborators who can deliver a world-class client experience. We are looking for people who thrive in a fast-paced environment, are client-focused,



team oriented, and are able to execute in a way that encourages creativity and continuous improvement.

Requirements:

- Bachelor's degree in computer science, Information Security, or a related field; or equivalent practical experience.

- 5+ years of experience in penetration testing, ethical hacking, or offensive security roles.

- Proficiency in at least one scripting language (e.g., Python, Ruby, PowerShell, Bash). In-depth knowledge of web application vulnerabilities (OWASP Top 10) and associated testing methodologies.

- Experience with various penetration testing tools such as Burp Suite, Metasploit, Nmap, Nessus, Acunetix, etc.

- Understanding of network protocols, operating systems (Windows, Linux), and cloud security principles (AWS, Azure, GCP). Familiarity with common security frameworks and standards (e.g., NIST, ISO 27001). Relevant certifications such as OSCP, OSCE, GPEN, GWAPT, or eCPPT are highly desirable.

- Exceptional written and verbal communication skills, with the ability to articulate complex technical issues to both technical and non-technical audiences. Ability to work independently and as part of a team in a fast-paced workplace.

📌 Senior Engineer Cyber Security (Hyderabad)
🏢 LPL Financials
📍 Hyderabad