Specialist, Penetration Testing in भारत

As a Specialist in Penetration Testing, you will plan and execute intelligence-led security testing engagements to certify
Audax platform builds and strengthen the organization's security posture. Working within the Risk & Delivery function,
you will design and operate offensive security tooling and methodologies that emulate real-world adversary behaviour,
identify exploitable weaknesses across applications, infrastructure, and mobile platforms, and translate technical
findings into clear, risk-rated guidance for engineering and risk stakeholders 

Responsibilities

Plan and execute penetration testing engagements across applications, networks, cloud, and mobile platforms,
applying a structured testing methodology to certify security control effectiveness for Audax platform builds.
• Design and build custom scripts, tools, and attack frameworks to emulate adversary tactics, techniques, and
procedures (TTPs) across the attack lifecycle, including detection-evasion approaches.
• Investigate identified vulnerabilities and threats, assess exploitability and business impact, and produce clear, risk
rated findings with corrective action recommendations.
• Prioritize remediation with Engineering, Infrastructure, and Product stakeholders and track findings through to
closure, validating remediation effectiveness.
• Advise stakeholders on risk exposure, likely attack paths, and containment measures to support risk-informed
decisions on vulnerabilities the organization could face.
• Reverse engineer and assess iOS and Android application binaries to identify exploitation paths, including evasion
of root/jailbreak detection controls.
• Maintain and refine testing tooling, playbooks, and internal frameworks based on engagement outcomes and
emerging threat intelligence.
• Contribute to continuous improvement of penetration testing processes and tooling, including integration with
DevSecOps and CI/CD practices.
• Assess cloud and containerised environments (including AWS and Kubernetes) against security best practice as
part of engagement scope.
• Produce clear technical and management reporting summarizing test results, risk exposure, and remediation
guidance for relevant stakeholders. 

Qualifications

6–9 years of hands-on experience in penetration testing and vulnerability management in a global environment,
including 3+ years as a lead penetration tester, reverse engineer, researcher, or threat analyst.
• Demonstrated experience testing web applications, mobile applications, and operating systems using techniques
including injection, privilege escalation, buffer overflows, fuzzing, and scanning.
• Working knowledge of tactics, techniques, and procedures (TTPs) used for reconnaissance, persistence, lateral
movement, and exfiltration, and of the broader threat and vulnerability landscape, including malware and
emerging attack methods.
• Proficiency in one or more offensive-security-relevant languages, such as Python, PowerShell, or shell scripting,
alongside familiarity with Objective-C, Java, Swift, or Assembly for mobile/OS-level work.
Internal
• iOS and Android reverse engineering, disassembly, decompilation, and evasion of root/jailbreak detection.
Internal
• Ability to write and demonstrate proof-of-concept work from an exploitation/attack perspective, including building
and deploying custom modules and tailored payloads for established testing frameworks.
• Solid understanding of networking topologies, protocols, and enterprise infrastructure (switches, routers, firewalls)
and their security implications.
• Familiarity with access control methodologies, intrusion detection, vulnerability and patch management tooling,
and endpoint security solutions.
• Experience in cloud security (particularly AWS), container and Kubernetes testing, and DevSecOps/CI-CD practices.
• Ability to communicate technical risk clearly to both technical and non-technical stakeholders, including influencing
remediation decisions.