Senior Penetration Tester & Red Teamer

As a Senior Penetration Tester at Cehpoint, you will protect high-stakes infrastructure by thinking like an adversary. You will lead black-box and white-box engagements across web apps, APIs, cloud environments, and internal networks, working directly with client CISOs and our senior engineering leadership.

• Perform advanced web application, API, and mobile application penetration tests following OWASP Top 10 and WSTG standards.
• Execute network infrastructure vulnerability assessments and internal Active Directory red team simulations.
• Evaluate cloud security configurations on AWS, OCI, and Azure environments for privilege escalation paths.
• Develop custom exploit scripts and automated proof-of-concept tools in Python or Bash.
• Draft executive-ready vulnerability reports with clear CVSS scoring, risk impact analyses, and actionable remediation steps.
• Conduct debrief meetings with client technical teams to guide remediation and perform re-testing validation.

• Deep foundational understanding of TCP/IP networking, DNS, firewalls, and HTTP/S protocol internals.
• Thorough mastery of OWASP Top 10 vulnerabilities (SQLi, SSRF, XSS, IDOR, Broken Authentication, Deserialization).
• Strong knowledge of Active Directory attack vectors (Kerberoasting, Pass-the-Hash, DCSync) and privilege escalation.
• Familiarity with enterprise compliance standards (ISO 27001, CERT-In guidelines, PCI-DSS, DPDP Act).

• Hands-on expertise with Burp Suite Professional, Nmap, Wireshark, Metasploit Framework, and BloodHound.
• Proficiency in Python, Bash, or Go for custom exploit and payload automation.
• Demonstrated ability to perform manual API pentesting (REST, GraphQL, WebSocket endpoints).
• Experience drafting professional vulnerability assessment reports with zero copy-paste fluff.

• Continuous research into newly published CVEs, zero-day research, and emerging threat actor techniques.
• Relentless dedication to ethical hacking ethics, responsible disclosure, and high professional integrity.
• Passion for automating repetitive security tasks while maintaining sharp manual investigative instincts.

• Competitive senior salary (₹8,00,000–₹15,00,000) with performance and project-completion bonuses.
• 100% remote work flexibility with home-office equipment support.
• Sponsored security certifications (OSCP, CRTP, CEH Master) and lab subscriptions.
• Direct leadership exposure working on mission-critical national and international client deployments.