Conduct network, web application, cloud, and red-team penetration tests; identify and exploit vulnerabilities; develop proof-of-concept scripts; assess cloud, API, container, Windows, Linux, and Active Directory security; document CVSS-rated findings and remediation plans; verify fixes; and support blue teams with threat and SIEM monitoring insights.
This is a remote position.
Penetration Tester / Ethical Hacker (Offensive Security)
Job Details
- Employment Type: Contract
- Work Mode: Remote
- Location: Offshore
- Total Experience Required: 4 to 8 years
- Relevant Experience Required: 3+ years of dedicated offensive security penetration testing and red teaming experience
- Mandatory Certification: Offensive Security Certified Professional (OSCP) or GIAC Penetration Tester (GPEN)
Job Summary
We are seeking an experienced Penetration Tester to conduct rigorous, multi-vector offensive security assessments against our global network infrastructure, web applications, and cloud environments. The ideal candidate will emulate advanced persistent threat (APT) tactics, discover hidden exploit vulnerabilities, and write technical proof-of-concept reports to help software engineering and infrastructure teams systematically harden corporate defenses.
Key Responsibilities
- Execute comprehensive network and web application penetration tests, utilizing automated scanning suites alongside manual exploration tactics to expose system vulnerabilities.
- Conduct realistic red-teaming simulation campaigns, probing corporate defenses, orchestrating advanced social engineering scenarios, and bypassing physical perimeter monitoring configurations.
- Develop structural custom exploitation scripts (e.g., Python, PowerShell, Bash) to demonstrate vulnerability severity while respecting operational stability guidelines.
- Triage and evaluate cloud infrastructure entry vectors, assessing multi-tenant environment perimeters, microservice containers, API authentication weaknesses, and misconfigured access permissions.
- Document and present highly detailed vulnerability disclosure reports, assigning clear impact scoring (CVSS), defining business risk matrices, and detailing step-by-step technical remediation paths.
- Perform rigorous post-remediation verification sweeps, re-testing patched software frameworks, validated infrastructure updates, and newly implemented defensive logic barriers.
- Collaborate closely with blue-team defensive operators, providing specific threat behavior inputs to optimize SIEM monitoring rules and security log alerts.
Requirements
- 4 to 8 years of core cybersecurity technical experience, with 3+ dedicated years actively performing authorized penetration tests within enterprise frameworks.
- Strong technical mastery of standard exploitation tooling arrays (e.g., Burp Suite Pro, Metasploit, Nmap, Kali Linux), reverse engineering scripts, and manual payload construction.
- Deep structural understanding of the OWASP Top 10 web/API flaws, Windows/Linux kernel security architectures, privilege escalation techniques, and active directory exploit vectors.
- Mandatory certification: OSCP or GPEN.
Preferred Qualifications
- Offensive Security Certified Expert (OSCE) or Advanced Web Attacks and Exploitation (OSWE) credential.
- Experience testing complex enterprise platforms like Salesforce networks, custom SAP endpoints, or specialized Workday database connectivity pipelines.
Similar Jobs
Blockchain • Fintech • Payments • Consulting • Cryptocurrency • Cybersecurity • Quantum Computing
Provides executive technology leadership for Mastercard’s Pune platform organization, connecting offshore execution with UK strategy and accountability. The role drives portfolio prioritization, governance, capacity planning, operational resilience, efficiency, automation, and cross-functional dependency resolution through matrix influence rather than direct authority. It also develops leaders, strengthens technical capability, aligns infrastructure and platform stakeholders, and scales the Pune technology hub while improving delivery effectiveness, productivity, and organizational maturity.
Top Skills:
AutomationEnterprise ArchitectureInformation SecurityInfrastructureOperational ResiliencePlatform Engineering
Artificial Intelligence • Consumer Web • Digital Media • Information Technology • Social Impact • Software
Translate English software UI text and online marketing content into natural European Spanish. Maintain meaning, tone, variables, formatting, glossaries, and style guidelines using key-based localization tools. Review and resolve linguistic QA issues, communicate availability and delivery risks asynchronously, and coordinate with Circle and another translator to maintain coverage. Work independently as a remote contractor while collaborating primarily through Slack.
Top Skills:
Slack
Artificial Intelligence • Consumer Web • Digital Media • Information Technology • Social Impact • Software
Translate software UI text and online marketing content from English into natural European Portuguese. Preserve meaning, tone, formatting, variables, and cultural conventions while following Circle’s glossary and style guide. Use key-based localization tools, resolve linguistic QA issues, communicate availability and risks asynchronously in Slack, and coordinate coverage with another translator. The role requires professional localization experience, native-level European Portuguese, strong English communication, independent judgment, and familiarity with SaaS or digital products as a bonus.
Top Skills:
Ai ToolsKey-Based Translation ToolsSlack
What you need to know about the Chennai Tech Scene
To locals, it's no secret that South India is leading the charge in big data infrastructure. While the environmental impact of data centers has long been a concern, emerging hubs like Chennai are favored by companies seeking ready access to renewable energy resources, which provide more sustainable and cost-effective solutions. As a result, Chennai, along with neighboring Bengaluru and Hyderabad, is poised for significant growth, with a projected 65 percent increase in data center capacity over the next decade.
