Penetration Tester

Company Description: DCDIUM Technologies is a cybersecurity-focused company committed to helping organizations protect their digital assets and achieve secure business growth. The team delivers end-to-end cyber security solutions, including Vulnerability Assessment and Penetration Testing across web applications, networks, mobile, IoT, wireless, and thick clients, as well as advanced red teaming and Active Directory security services. DCDIUM also provides threat management implementations (such as SIEM, EDR/XDR, IAM, PAM, and UEBA), secure configuration assessments, source code reviews, and comprehensive cloud security services. The company supports organizations in meeting key regulatory and compliance standards, including HIPAA, ISO 27001, PCI-DSS, GDPR, SOX, SOC-2, and CIS Benchmarks. In addition, DCDIUM offers cyber security training programs and technical staffing solutions for both remote and on-site engagements. Role Description: This is a full-time, on-site Penetration Tester role based in the Mumbai location. The Penetration Tester will perform vulnerability assessments and penetration tests on web applications, APIs, networks, mobile applications, Thick Client, cloud environments, and other critical systems, documenting findings and recommending remediation steps. The role involves designing and executing realistic attack scenarios, supporting red team exercises, and collaborating with internal teams and clients to improve overall security posture. The Penetration Tester will analyze security controls, assist with secure configuration reviews, and contribute to application security and threat management initiatives. The individual will also support continuous improvement of testing methodologies, maintain up-to-date knowledge of emerging threats and tools, and help create clear, actionable technical and executive-level reports. Experience & Qualifications Candidate should have minimum 3 years of experience as Pentester (VAPT)Candidates should possess strong Cybersecurity skills, including knowledge of common attack vectors, defensive controls, and security frameworks.Candidates should possess Application Security skills, including secure coding principles, web and API security, and experience with common vulnerabilities (e.g., OWASP Top 10).Candidates should possess Red Teaming skills, including scenario-based assessments, adversary emulation, and collaborative engagement with blue teams.Relevant experience with VAPT tools and platforms (e.g., Burp Suite, Nmap, Metasploit, Wireshark, Nessus, or similar)Strong analytical, documentation, and communication skills, with the ability to explain complex technical findings to diverse stakeholders.Bachelors degree in Computer Science, Information Security, or a related field, or equivalent practical experience.Industry certifications such as CEH, OSCP, OSCE, GPEN, .