Senior Penetration Testing Analyst

This is a fully remote position, open to applicants in India.

📋 Description

• Facilitate activities, documentation, readiness schedules, and information flow between business, clients, and project teams.

• Serve as the primary contact for testing readiness and communicate the status of readiness.

• Utilize project management tools to track tasks, responsible parties, timelines, and overall status.

• Report and escalate issues to management as necessary.

• Take initiative on new and varied requests and identify opportunities for value addition.

• Perform application security assessments that include web, mobile, and API security, as well as network penetration testing evaluations.

• Employ both commercially available and internally developed exploitation tools for manual testing and advanced attack scenarios.

• Create and present professional security assessment reports that include vulnerability and exploit information.

• Lead client conference calls related to readiness, troubleshooting, project initiation, notifications of high/critical findings, and close-out reviews.

• Investigate new threats, vulnerabilities, and exploits.

• Conduct exploitation testing and document findings to assist clients with remediation.

• Work autonomously as well as collaboratively within a larger team.

⛳️ Requirements

• Over 5 years of experience in Information Security.

• At least 2 years of experience in penetration testing.

• Minimum of 2 years of hands-on experience with at least one of the following: Nmap, Metasploit, Kali Linux, Burp Suite.

• Exceptional client-facing and internal written and verbal communication abilities.

• Quick learner who thrives in a dynamic, high-energy team environment.

• Professional attitude with a strong work ethic and a collaborative mindset.

• Strong organizational skills, meticulous attention to detail, and the ability to multitask effectively.

• Experience with NMap scanning methodologies.

• Knowledge of web application authentication techniques.

• Familiarity with APIs and their authentication methods.

• Understanding of SOAPUI/Restlet and other API testing tools.

• Proficient in Linux.

• Comprehension of networking devices, including routers, load balancers, firewalls, WAF, IDS/IPS, and web content filters/proxies.

• Knowledge of tools used for validating network access through a penetration testing platform.

• Candidates must possess legal authorization to work in India without employer sponsorship.

🏝️ Benefits

• Remote-first working model.

• Employee-led diversity and inclusion networks.

• Annual charity and fundraising initiatives.

• Volunteer days.

• Global employee sustainability initiatives.

• Global fitness and trivia competitions.

• Global wellbeing days.

• Monthly wellbeing webinars and training sessions.

• Adjustments in the recruitment and selection process for applicants with disabilities or other specific needs.