The Role
Execute penetration testing engagements across web applications, APIs, networks, and cloud environments. Identify and exploit vulnerabilities, develop proof-of-concepts, document findings, and provide risk-based remediation guidance. Produce client-ready reports and participate in scoping, kickoff, and review calls. Perform peer QA, retesting, research, tooling, and methodology improvements while communicating effectively with technical and non-technical stakeholders.
Summary Generated by Built In
Penetration Tester (Mid–Senior Level)
Location - Remote - India
Experience Level - 2-5 years
As a Penetration Tester, you will be responsible for executing penetration testing engagements through client delivery with minimal oversight. You will independently perform testing activities, identify and exploit vulnerabilities, and produce high-quality client deliverables with clear, actionable remediation guidance.You will assess web applications, APIs, networks, and/or cloud environments using a combination of automated tools and manual techniques. This includes configuring and operating testing tools, developing proof-of-concepts to demonstrate impact, and clearly documenting findings.You will also participate in client-facing activities such as scoping discussions, kickoff calls, and report reviews, and are expected to communicate technical concepts effectively to both technical and non-technical audiences. In addition to delivery, you will contribute to the overall quality and evolution of the testing program by performing QA, Re-Tests, peer reviews, supporting internal tooling and methodology improvements, and sharing knowledge with other team members.
Must Have: Offensive Security CertificationExperience testing web applications and APIs (REST, SOAP, XML, JSON) and thick client
Key Responsibilities:
Location - Remote - India
Experience Level - 2-5 years
As a Penetration Tester, you will be responsible for executing penetration testing engagements through client delivery with minimal oversight. You will independently perform testing activities, identify and exploit vulnerabilities, and produce high-quality client deliverables with clear, actionable remediation guidance.You will assess web applications, APIs, networks, and/or cloud environments using a combination of automated tools and manual techniques. This includes configuring and operating testing tools, developing proof-of-concepts to demonstrate impact, and clearly documenting findings.You will also participate in client-facing activities such as scoping discussions, kickoff calls, and report reviews, and are expected to communicate technical concepts effectively to both technical and non-technical audiences. In addition to delivery, you will contribute to the overall quality and evolution of the testing program by performing QA, Re-Tests, peer reviews, supporting internal tooling and methodology improvements, and sharing knowledge with other team members.
Must Have: Offensive Security CertificationExperience testing web applications and APIs (REST, SOAP, XML, JSON) and thick client
Key Responsibilities:
- Execute penetration testing engagements, across web applications, APIs, networks, and cloud environments
- Identify, exploit, and document vulnerabilities with clear supporting evidence and proof-of-concept
- Develop practical, risk-based remediation guidance
- Produce high-quality, client-ready reports
- Participate in client-facing calls including scoping, kickoff, and report reviews
- Perform QA reviews of peer deliverables
- Contribute to internal tools, research, and methodology improvements
- Support and collaborate with team members to maintain delivery quality and consistency
- Handle sensitive client information with confidentiality and professionalism
Qualifications & Experience: - Strong understanding of networks, web/mobile applications, and common security vulnerabilities (e.g., OWASP Top 10, common CVEs)
- Industry-relevant certifications (SANS, Offensive Security, eLearn Security, etc.)
- Experience testing web applications and APIs (REST, SOAP, XML, JSON)
- Familiarity with modern web frameworks (e.g., Angular, Bootstrap)
- Experience with scripting languages such as Python, Bash, PowerShell, or similar
- Knowledge of vulnerabilities including XSS, SQL Injection, XXE, SSRF, deserialization, file inclusion/path traversal, authentication flaws, and remote code execution
- Ability to develop proof-of-concepts and clearly demonstrate impact
- Strong written and verbal communication skills
- Ability to work independently and as part of a team
Skills Required
- Offensive security certification or industry-relevant certification from SANS, Offensive Security, eLearnSecurity, or similar
- 2-5 years of penetration testing experience
- Experience testing web applications and APIs, including REST, SOAP, XML, and JSON
- Experience testing thick-client applications
- Strong understanding of networks, web and mobile applications, and common security vulnerabilities
- Familiarity with modern web frameworks such as Angular and Bootstrap
- Experience with scripting languages such as Python, Bash, PowerShell, or similar
- Knowledge of XSS, SQL injection, XXE, SSRF, deserialization, file inclusion, path traversal, authentication flaws, and remote code execution
- Ability to develop proof-of-concepts and demonstrate impact clearly
- Strong written and verbal communication skills
- Ability to work independently and collaboratively
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Prescient Security is a global cybersecurity and compliance firm specializing in risk-based audits, advanced penetration testing, and end-to-end framework support. They empower organizations, particularly B2B SaaS companies, to strengthen their security posture, accelerate critical certifications, and build lasting customer trust through expert-led programs covering comprehensive frameworks such as SOC, ISO, FedRAMP, PCI, HIPAA, HITRUST, and GDPR.
