Security Penetration Testing Consultant

Withum · India

We are seeking a motivated and detail-oriented Security Penetration Testing Consultant with 2-3 years of hands-on experience performing security assessments and penetration tests. The ideal candidate combines strong technical security skills with clear communication, sound judgment, and a collaborative consulting mindset. This role supports client engagements by identifying vulnerabilities, explaining risk in plain language, and providing practical remediation guidance.

KEY RESPONSIBILITIES

• Conduct penetration testing of external and internal networks, web applications, APIs, cloud environments, wireless networks, and mobile applications when applicable.
• Perform vulnerability assessments and validate identified security weaknesses using manual and automated techniques.
• Document findings with business impact, risk ratings, supporting evidence, and clear remediation guidance.
• Present results to technical and non-technical stakeholders in a professional and understandable manner.
• Support remediation validation, retesting, red team, purple team, and security validation activities as needed.
• Stay current with emerging threats, attack techniques, testing tools, and security technologies.

REQUIRED QUALIFICATIONS

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or equivalent work experience.
• 2-3 years of experience in penetration testing, ethical hacking, vulnerability assessment, or offensive security.
• Hands-on experience with tools such as Burp Suite, Nmap, Nessus, Metasploit, Wireshark, and Kali Linux toolsets.
• Working knowledge of OWASP Top 10, MITRE ATT&CK, network security, application security, and common attack techniques.
• Ability to write clear, concise, and professional technical reports.

SOFT SKILLS & TEAM COLLABORATION

• Communicates clearly, respectfully, and confidently with clients, teammates, and project stakeholders.
• Explains complex technical concepts in plain language and connects findings to business risk.
• Works effectively in a team environment, including peer review of findings, reports, and testing approaches.
• Builds trust through responsiveness, professionalism, follow-through, and sound handling of sensitive information.
• Accepts and provides constructive feedback in a practical, professional, and improvement-focused way.
• Demonstrates curiosity, adaptability, accountability, and a strong commitment to continuous learning.

PREFERRED QUALIFICATIONS

• Certifications such as Security+, PenTest+, eJPT, PNPT, CEH, or OSCP.
• Experience testing Azure, AWS, or Google Cloud environments.
• Familiarity with Python, PowerShell, or Bash scripting.
• Experience with Active Directory security assessments.
• Prior client-facing consulting, project delivery, or professional services experience.

SUCCESS FACTORS

• Takes ownership of deliverables and meets commitments.
• Balances technical depth with practical, client-ready recommendations.
• Contributes to service improvement, team knowledge sharing, and mentoring opportunities.

NOTE

A hands-on technical proficiency test may be required as part of the interview process