Senior Security Consultant (Penetration Tester)
About the role
We are looking for a Penetration Tester to conduct authorized penetration testing and security assessments across web applications and enterprise environments, with opportunities to work on security configuration reviews and cloud-related assessments. The role involves identifying and validating vulnerabilities, evaluating potential security risks, and producing clear, evidence-based technical reports.
Key responsibilities
Perform web application penetration testing covering web applications, mobile applications, APIs, and LLM-based applications.
Conduct enterprise penetration testing covering external and internal infrastructure, Active Directory, and phishing-based initial access scenarios.
Perform security configuration reviews and cloud-related assessments as required by project scope.
Identify and validate vulnerabilities through authorized testing of target systems and technical objects.
Document testing procedures, findings, supporting evidence, and potential business impact.
Prepare technical reports with clear findings and practical remediation recommendations.
Work with internal teams and customers to define testing scope, requirements, and rules of engagement.
About you
Minimum 2 years of hands-on, on-field penetration testing experience.
Practical knowledge of web application vulnerabilities, OWASP, network protocols, operating systems, and enterprise attack techniques.
Experience with penetration testing tools and manual testing methodologies.
Familiarity with security configuration reviews or cloud security assessments is an advantage.
Good analytical, problem-solving, technical documentation, and communication skills.
Relevant industry certifications are an advantage. Certification training and examination sponsorship will be provided.