Operations (Penetration Tester)

Number of Openings 2 ECMS ID in sourcing stage 521581 Assignment Duration 6 months Total Yrs. of Experience Same or more than relevant years of experience given below Relevant Yrs. of experience At least 9 years of experience Detailed JD (Roles and Responsibilities) Penetration Tester (Web, API, Network), Red Teaming and Purple Teaming. Web Application Penetration Testing: Identifying vulnerabilities in web applications, including common OWASP Top 10 risks. API Penetration Testing: Assessing the security of APIs, understanding common API vulnerabilities and authentication mechanisms. Network Penetration Testing: Conducting internal and external network assessments, exploiting infrastructure weaknesses. Red Teaming: Simulating sophisticated attacks to test organizational defenses and incident response capabilities. Purple Teaming: Collaborating with defensive teams to improve security posture through shared insights from simulated attacks. Proactively pursue, validate and report any system security loopholes, infringements and vulnerabilities identified. Collaborate with application security and information technology personnel to schedule, test and provide findings for penetration testing. Tools expertise needed for above skills mentioned below and not limited to : Web Application and API PT: BurpSuite, Postman Network Pen Test: Metasploit Framework, Nmap, Responder, BloodHound, Hydra / Medusa, John the Ripper / Hashcat, Wireshark / tcpdump, Ettercap, mitmproxy Infra VM: Rapid7/Qualys/Nessus, Red & Purple Teaming Tools: Cobalt Strike, Brute Ratel C4, Empire / Starkiller (Powershell Empire), PoshC2, Maltego,Shodan, Recon-ng, Social-Engineer Toolkit (SET), Gophish, Payload obfuscators, CrackMapExec Mandatory skills Pen Testing experience on Web, API and Network. Red Teaming and Purple Teaming Desired/ Secondary skills Infrastructure Vulnerability management Domain Max Vendor Rate in Per Day (Currency in relevance to work location) 12000 INR / Day Work Location given in ECMS ID Offshore WFO/WFH/Hybrid WFO Hybrid WFO BG Check (Before OR After onboarding) Before Is there any working in shifts from standard Daylight (to avoid confusions post onboarding) YES/ NO Morning Shift (05:30 AM to 2:45 PM) / Second shift (02:00 PM to 11:15 PM)