Job highlights

- Cloud CI / CD Proficiency: Strong understanding of cloud-native architectures,containerization (Docker,Kubernetes),and experience finding security flaws in DevOps pipelines (GitLab,GitHub Actions,Jenkins,etc.).

- Essential Qualifications: .

Extensive Experience: 7+ years of hands-on experience in penetration testing,offensive security,or red teaming.

Trading Technologies is looking for a highly skilled and technically creative Senior Penetration Tester to join our internal Offensive Security (Offsec) team. Reporting directly to the Offensive Security Manager, you will be the technical tip of the spear in proactively identifying and exploiting vulnerabilities across our entire technology estate.

In this senior technical role, you will lead complex, full-stack security assessments ranging from modern web applications and complex APIs to cloud infrastructure, CI/CD pipelines, and deep-dive Active Directory environments. Beyond breaking things, you will partner closely with our engineering teams to ensure vulnerabilities are understood and effectively remediated, while also serving as a technical mentor to the broader security team.

Key Responsibilities

- Comprehensive Penetration Testing: Lead and execute advanced, end-to-end penetration tests across TT s entire technology ecosystem, including complex web applications, microservices, REST/WebSocket APIs, internal network infrastructure, and thick-client trading applications.

- Cloud DevOps Security: Conduct targeted assessments against our cloud infrastructure (e.g., AWS, GCP) and containerized environments. Actively test and identify misconfigurations or vulnerabilities within our CI/CD pipelines to secure our software supply chain.

- Infrastructure Active Directory:



Execute internal network penetration tests, including advanced Active Directory abuse and exploitation (e.g., Kerberoasting, lateral movement, privilege escalation) to identify internal structural weaknesses.

- Actionable Reporting: Produce comprehensive, high-quality technical reports that clearly articulate vulnerabilities, demonstrate business impact via proof-of-concepts (PoCs), and provide realistic, actionable remediation guidance for engineering teams.

- Remediation Support: Partner with the Offensive Security Manager and Engineering teams to validate fixes, provide technical clarity on vulnerabilities, and participate in threat modeling or architectural reviews as a subject matter expert.

- Tooling Automation: Develop custom scripts, exploits, or automation tools to streamline internal penetration testing methodologies and improve the efficiency of the Offsec team.

- Technical Mentorship: Serve as a technical leader within the team, mentoring junior/mid-level testers, sharing cutting-edge research, and elevating the team s overall technical proficiency.

Skills, Knowledge and Expertise

Essential Qualifications:

- Extensive Experience: 7+ years of hands-on experience in penetration testing, offensive security, or red teaming.

- Application API Expertise: Deep understanding of modern web application and API vulnerabilities (OWASP Top 10, CWEs),



authentication protocols (OAuth, SAML), and testing methodologies.

- Infrastructure Mastery: Proven experience with network penetration testing, bypassing network segmentation, and conducting complex Active Directory exploitation (using tools like BloodHound, Impacket, Mimikatz, etc.).

- Cloud CI/CD Proficiency: Strong understanding of cloud-native architectures, containerization (Docker, Kubernetes), and experience finding security flaws in DevOps pipelines (GitLab, GitHub Actions, Jenkins, etc.).

- Tooling Scripting: Expert-level proficiency with industry-standard offensive tools (e.g., Burp Suite Pro, Metasploit, Cobalt Strike, Nmap). Strong programming/scripting abilities in Python, Bash, Go, or PowerShell to write custom tooling or modify exploits.

- Communication Skills: Exceptional ability to translate highly technical findings into explicit, business-focused risks for both technical and non-technical stakeholders.

Desirable Qualifications:

- Industry Certifications: Highly regarded offensive security certifications such as OSCP, OSWE, OSEP, CRTO, GXPN, or equivalent.

- FinTech Experience: Previous experience testing high-frequency trading platforms, financial technology, or heavily regulated environments.

- Community Involvement: A track record of independent vulnerability research, published CVEs, active bug bounty participation, or speaking engagements at security conferences (DEFCON, Black Hat, BSides).

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

📌 Sr Penetration Tester (Ahmedabad)
🏢 Trading Technologies
📍 Ahmedabad