Role & responsibilities

1. Penetration Testing & Security Assessments

Independently plan, scope, execute, document, and close penetration testing engagements from scoping through retesting.

Perform advanced Web Application, API, Network, Mobile, Cloud, Active Directory, and Infrastructure penetration testing.

Conduct authenticated and unauthenticated assessments and validate vulnerabilities through controlled exploitation.

Identify attack chains by combining vulnerabilities, misconfigurations, weak controls, and identity risks.

Develop exploit Proof-of-Concepts (PoCs), validate impact, and provide practical remediation guidance.

Perform manual testing beyond automated scanner results and validate remediation through retesting.

2. Business & Risk-Based Penetration Testing

Understand customer business models, critical workflows, applications, data flows, technology architecture, and critical assets before testing.

Translate business requirements and threat scenarios into an appropriate penetration testing strategy.

Prioritize findings using business criticality, exploitability, exposure, attack path, data sensitivity, and potential operational or financial impact.

Design realistic attack scenarios relevant to the customer's industry and threat landscape.

Translate technical weaknesses into business risk and provide practical recommendations aligned with operational constraints.

3. Advanced Offensive Security

Conduct adversary simulation and advanced penetration testing activities where applicable.

Perform attack-path analysis covering initial access, privilege escalation, credential compromise, lateral movement, persistence,

defense evasion, and controlled data-access/exfiltration simulation.

Perform Active Directory security assessments and identify privilege-escalation and identity attack paths.

Conduct cloud attack-path assessments across AWS/Azure environments.

Research emerging vulnerabilities, exploits, TTPs, and offensive security techniques.

4. Web & API Security

Perform comprehensive manual Web and API testing aligned with OWASP Top 10, OWASP API Security Top 10, and OWASP

WSTG.

Test authentication, authorization, session management, access controls, business logic, input validation, API security, and sensitive-data exposure.

Assess and exploit vulnerabilities such as IDOR/BOLA, privilege escalation, SSRF, injection, authentication bypass, business

logic flaws, and insecure deserialization.

Perform business-logic testing based on real application functionality and customer workflows.ZyBiSys Consulting Services LLP Senior Penetration Tester JD

5. Cloud & Infrastructure Security

Assess AWS/Azure IAM, networking, storage, workloads, secrets, security groups/NSGs, logging, and configuration controls.

Identify attack paths across cloud identities, workloads, storage, and network components.

Perform internal and external network/infrastructure penetration testing and Active Directory/Windows security assessments.

6. SOC Support Threat Hunting & Advanced Investigations





Work closely with the SOC team to support proactive threat hunting across SIEM, XDR/EDR, network, endpoint, identity, and cloud telemetry.

Develop and execute threat-hunting hypotheses based on emerging threats, MITRE ATT&CK; techniques, threat intelligence,

observed attacker TTPs, and organizational risk.

Support advanced investigations involving suspicious activity, compromised accounts, malware, lateral movement, privilege escalation, persistence, and potential data compromise.

Correlate penetration-testing findings and attack paths with SOC detections to identify monitoring gaps and improve detection coverage.

Provide technical advisory to SOC analysts during complex investigations and help validate attack techniques through controlled simulations.

Recommend new detection use cases, telemetry requirements, investigation playbooks, and threat-hunting queries based on offensive-security findings.

Participate in incident investigations as a subject-matter expert for exploitation, attacker behavior, and attack-path analysis.

Conduct purple-team style validation where required to verify whether SOC controls can detect and respond to realistic attack techniques.

7. Security Advisory & Consulting

Provide security advisory to application, infrastructure, cloud, DevOps, SOC, and security teams.

Review architecture, security controls, and proposed remediation approaches from an attacker perspective.

Advise on security improvements based on penetration-testing findings, threat intelligence, incident observations, and emerging attack techniques.

Support security design reviews and provide practical recommendations that balance security and business requirements.

8. Automation, Scripting & Exploit Development

Develop scripts and automation to improve penetration-testing and security-investigation efficiency.

Create custom tools, payloads, PoCs, and exploit scripts where required.

Use Python, PowerShell, and Bash for security automation, testing, and investigation support.

Understand exploit code and modify publicly available PoCs safely for authorized assessment activities.

9. Reporting & Client Communication

Prepare high-quality technical and executive-level penetration-testing reports.

Document vulnerability details, evidence, business impact, risk, attack paths, PoCs, and remediation recommendations.

Present findings to technical teams, security leadership, and business stakeholders.

Conduct client walkthroughs, remediation discussions, and vulnerability-closure/retest sessions.

10. Individual Contributor Expectations





Own penetration-testing engagements independently with minimal supervision.

Define methodology, testing approach, effort estimates, dependencies, and timelines.

Handle complex and ambiguous security problems and take ownership of deliverable quality.

Mentor junior testers through technical guidance and knowledge sharing.

Improve internal PT methodologies, checklists, tooling, automation, and reporting standards.

Contribute to security research, labs, offensive-security capability development, and service improvement.

Preferred candidate profile

5+ years of professional experience in penetration testing, offensive security, or closely related security engineering roles.

•

Solid hands-on experience conducting end-to-end penetration-testing engagements.

•

Experience independently handling customer-facing security assessments.

•

Demonstrated ability to identify vulnerabilities that automated scanners typically miss.

•

Experience with complex enterprise environments and business-critical applications.

•

Strong understanding of attack chains, exploitation, threat hunting, and real-world attacker TTPs.

•

Experience supporting advanced SOC investigations or incident response is highly desirable.

•

Ability to prepare professional technical and executive reports and conduct remediation validation.

Preferred Certifications

•

OSCP

•

CEH Practical

Additional Certifications (Optional)

•

OSWE

•

OSEP

•

CRTO

•

CRTP / CRTE

•

GPEN

•

PNPT

•

eJPT / eCPPT

OSCP/OSEP/OSWE/CRTO or equivalent hands-on certifications are highly desirable.

Key Success Measures

•

Independently deliver high-quality penetration-testing engagements.ZyBiSys Consulting Services LLP Senior Penetration Tester JD

•

Identify meaningful vulnerabilities and realistic attack paths.

•

Demonstrate business impact through controlled exploitation.

•

Provide actionable remediation and security advisory.

•

Support SOC threat hunting and advanced investigations effectively.

•

Improve detection coverage by translating offensive findings into hunting hypotheses and detection use cases.

•

Maintain high-quality, accurate, and timely reports.

•

Continuously improve offensive-security methodologies, automation, and service quality.

Ideal Candidate Profile

We are looking for a hands-on senior offensive-security professional who combines strong technical skills, adversary mindset,

business understanding, exploitation capability, threat-hunting expertise, security advisory skills, and excellent communication.

The candidate should be comfortable asking: “If I were an attacker targeting this business, what would I attack first, how would I get in, how could I move further, what evidence would I leave behind, and what business impact could I create?” The individual should then be able to translate that thinking into a structured penetration test, actionable SOC hunting/investigation activity, and measurable security improvements.

📌 Senior Penetration Tester (Bengaluru)
🏢 Zybisys Consulting Services
📍 Bengaluru