Not specified

Company Key Responsibilities:

 Perform penetration testing and security assessments of web applications,

APIs, Android, IOS, cloud infrastructure, embedded systems, and network

environments.

 Conduct threat modelling and vulnerability assessments during different

stages of the software development lifecycle (SDLC).

 Simulate real-world attacks to identify potential security weaknesses in

enterprise and automotive systems.

 Provide detailed and well-documented reports of findings with actionable

remediation guidance.

 Collaborate with development, architecture, DevOps, and infrastructure teams

to mitigate vulnerabilities and strengthen security controls.

 Perform retesting to validate resolved vulnerabilities.

 Stay current on latest attack techniques, vulnerabilities, and tools in the

cybersecurity domain.

 Contribute to internal knowledge bases, red team frameworks, and

automation of recurring testing processes.

*Qualifications for Internal

Candidates

 Minimum 4-5 years of professional experience in penetration testing, ethical

hacking, or red teaming.

 Mandatory certification: OSCP or CRTP.

 Solid experience using penetration testing tools such as:

o Burp Suite

o Metasploit

o Nmap, Nikto, SQLmap, John the Ripper, Hydra, etc.

 Proficiency in scripting languages like Python, Bash, or PowerShell for

automation.

 Strong understanding of:

o OWASP Top 10 vulnerabilities

o Secure coding practices

o Network protocols and architecture

o Web and mobile application security

 Experience working in Linux and Windows environments.

 Familiarity with threat modelling and security frameworks like MITRE

ATT&CK, NIST, and STRIDE.

Same Posting Description for Internal and External Candidates

Not specified.

Job Summary

Not specified.

Responsibilities

• Not specified.

Qualifications

• Not specified.

Preferred Skills

• Not specified.

Experience

Not specified.

Environment

Not specified.

Salary

Not specified.

Growth Opportunities

Not specified.

Benefits

Not specified.