Job description
Job Title: Penetration-Tester-Chennai
Location: Chennai (WFO)
Total Years: 12+ Years
Relevant: 6+ Years
Main Skills: Penetration Testing, Mobile App testing & web app testing, OSCP certification preferred
Work Time: 8.30 AM to 5.30 PM
Job Summary:
We are seeking a skilled Penetration Tester to join our security team. In this role, you will simulate cyber-attacks on computer systems to identify vulnerabilities that could be exploited by malicious actors. You will work across various platforms and technologies, utilizing your expertise to strengthen our security posture.
Key Responsibilities:
- Conduct Security Assessments: Execute penetration tests on applications, network devices, and cloud infrastructures to identify security weaknesses.
- Social Engineering: Plan and execute simulated social engineering attacks to evaluate employee awareness and organizational resilience against social threats.
- Research & Experimentation: Explore and implement various attack methods through ongoing research and experimentation to stay updated on emerging threats.
- Strategy Development: Create and refine strategies for penetration testing tailored to different environments, including networks, web/mobile applications, and IoT systems.
- Code Evaluation: Analyze and review codebases to identify vulnerabilities and recommend remediation strategies.
- Malware Analysis: Conduct reverse engineering of malware or spam to understand their behavior and mitigate future threats.
- Documentation: Record security findings, vulnerabilities, and compliance issues, ensuring thorough documentation for follow-up actions.
- Automation: Develop and implement automated testing methods to enhance the efficiency and productivity of security assessments.
- Reporting: Prepare comprehensive technical reports detailing vulnerabilities, risks, and suggested mitigations, along with executive-level summaries for management.
- Presentations: Effectively communicate findings to technical teams and executive management, ensuring clarity and actionable insights.
- Verification Testing: Conduct additional testing to verify the effectiveness of security enhancements and remediation efforts.
- Mobile Application Testing: Perform penetration testing specifically on mobile applications to ensure security across all platforms.
Preferred Qualifications:
- Certifications:
- Offensive Security Certified Professional (OSCP) (Preferred)
- Certified Penetration Testing Specialist (CPTS)
- PNPT (Pentester Ninja Professional Training)
- PJPT (Junior Penetration Tester)
- eCCPT (eLearnSecurity Certified Professional Penetration Tester)
- Technical Skills:
- Proficiency in penetration testing tools and frameworks (e.g., Metasploit, Burp Suite, Nessus).
- Familiarity with scripting languages (e.g., Python, Bash) for automation and tool development.
- Knowledge of networking protocols, security standards, and best practices.
- Understanding of web technologies, mobile application architecture, and cloud environments.
- Experience:
- Previous experience in cybersecurity, penetration testing, or related fields.
- Proven track record of identifying and exploiting vulnerabilities in various systems.
Personal Attributes:
- Strong analytical and problem-solving skills.
- Excellent communication and presentation abilities.
- Ability to work independently and as part of a team.
- Detail-oriented with a strong commitment to ethical standards and confidentiality.
Role: Cyber Security
As a Cyber Security professional, you will play a critical role in safeguarding the organization’s information systems and sensitive data. Your primary responsibility will be to implement and manage robust security measures to protect against cyber threats and attacks. You will be part of a dedicated team focused on developing, enhancing, and maintaining the organization’s security infrastructure, ensuring the highest standards of data protection and network security.
Your tasks will include but are not limited to:
- Conducting vulnerability assessments and risk analysis to identify potential security gaps in IT systems.
- Designing and implementing firewalls, encryption techniques, and other security protocols to protect sensitive information.
- Monitoring and responding to security incidents, including data breaches, malware attacks, and unauthorized access attempts.
- Developing and enforcing security policies, procedures, and best practices to ensure that security is an integral part of the organizational culture.
- Collaborating with various departments, including IT, compliance, and legal teams, to ensure adherence to security standards and regulations.
You will need a deep understanding of cyber threats, ethical hacking, network security, and incident response methodologies. As a Cyber Security expert, your proactive approach will help in identifying emerging threats, mitigating risks, and maintaining the integrity of the organization’s digital environment.
Industry Type: IT Services & Consulting
The IT Services & Consulting industry is characterized by providing a broad range of technology solutions, consulting services, and support to clients across various sectors. As a Cyber Security professional in this domain, your role is crucial in ensuring that the technological infrastructures of client organizations are secure, resilient, and compliant with applicable regulations.
Your expertise will be pivotal in:
- Helping clients assess their cybersecurity posture and implement effective security strategies.
- Ensuring data privacy, compliance, and disaster recovery measures are in place for client organizations.
- Designing customized cybersecurity solutions based on the client’s specific needs and regulatory requirements.
This industry offers the opportunity to work with a diverse set of clients, providing dynamic challenges and exposure to the latest technologies and security threats.
Department: IT & Information Security
The IT & Information Security department is dedicated to protecting the organization’s IT infrastructure, applications, and data from unauthorized access, cyberattacks, and other security threats. This department is at the forefront of building and maintaining secure systems, networks, and applications, ensuring the continuity and integrity of business operations.
In this department, you will collaborate closely with other teams, such as network operations, compliance, and IT support, to create and implement security strategies that align with business goals and compliance requirements. The department is responsible for maintaining a proactive security posture by continuously monitoring systems, conducting security audits, and responding to threats in real-time.
Employment Type: Full Time, Permanent
This position is a full-time, permanent role, providing long-term career growth and stability within the organization. As a permanent employee, you will have access to competitive compensation, benefits, and opportunities for career advancement. You will be part of a high-impact team that values innovation, collaboration, and ongoing professional development.
Role Category: IT Security
As part of the IT Security category, your responsibilities will focus on protecting and securing the company’s digital infrastructure. Your role will include the design, implementation, and management of security systems and protocols across the organization. This encompasses the protection of internal networks, applications, and databases, as well as ensuring compliance with cybersecurity regulations and industry standards.
In this category, you’ll be expected to have expertise in:
- Risk management and security governance.
- Security operations including incident detection, response, and forensics.
- Compliance management, ensuring that all IT systems adhere to regulations like GDPR, HIPAA, and other industry-specific standards.
- Cloud security, especially if the organization operates in multi-cloud environments.
Your role will also require constant upskilling and adapting to the ever-changing landscape of cyber threats, ensuring the organization remains secure against emerging risks.
This role will provide significant growth opportunities as you develop your expertise in the rapidly evolving field of Cyber Security and contribute to the protection of valuable business assets. The dynamic nature of this industry means that no two days are the same, offering you the chance to tackle new challenges and build an impactful career in IT security.
