Penetration Testing
The full posting
Penetration Tester (Mid–Senior Level)
Location - Remote - India
Experience Level - 2-5 years
As a Penetration Tester, you will be responsible for executing penetration testing engagements through client delivery with minimal oversight. You will independently perform testing activities, identify and exploit vulnerabilities, and produce high-quality client deliverables with clear, actionable remediation guidance.
You will assess web applications, APIs, networks, and/or cloud environments using a combination of automated tools and manual techniques. This includes configuring and operating testing tools, developing proof-of-concepts to demonstrate impact, and clearly documenting findings.
You will also participate in client-facing activities such as scoping discussions, kickoff calls, and report reviews, and are expected to communicate technical concepts effectively to both technical and non-technical audiences. In addition to delivery, you will contribute to the overall quality and evolution of the testing program by performing QA, Re-Tests, peer reviews, supporting internal tooling and methodology improvements, and sharing knowledge with other team members.
Must Have
Offensive Security Certification
Experience testing web applications and APIs (REST, SOAP, XML, JSON) and thick client
Key Responsibilities
- Execute penetration testing engagements, across web applications, APIs, networks, and cloud environments
- Identify, exploit, and document vulnerabilities with clear supporting evidence and proof-of-concept
- Develop practical, risk-based remediation guidance
- Produce high-quality, client-ready reports
- Participate in client-facing calls including scoping, kickoff, and report reviews
- Perform QA reviews of peer deliverables
- Contribute to internal tools, research, and methodology improvements
- Support and collaborate with team members to maintain delivery quality and consistency
- Handle sensitive client information with confidentiality and professionalism Qualifications & Experience:
- Strong understanding of networks, web/mobile applications, and common security vulnerabilities (e.g., OWASP Top 10, common CVEs)
- Industry-relevant certifications (SANS, Offensive Security, eLearn Security, etc.)
- Experience testing web applications and APIs (REST, SOAP, XML, JSON)
- Familiarity with modern web frameworks (e.g., Angular, Bootstrap)
- Experience with scripting languages such as Python, Bash, PowerShell, or similar
- Knowledge of vulnerabilities including XSS, SQL Injection, XXE, SSRF, deserialization, file inclusion/path traversal, authentication flaws, and remote code execution
- Ability to develop proof-of-concepts and clearly demonstrate impact
- Strong written and verbal communication skills
- Ability to work independently and as part of a team
Where you can be based
This position is 100% remote and open to applicants based in India.
Text as Prescient Security published it; last compared with the original on 13 Nov 2026.
The employer: Prescient Security
Prescient Security runs compliance audits and penetration tests for client companies; it wants a penetration tester for remote work in India.
Pay and benefits: Full-time, client-facing testing role delivering engagements, remote within India.
Other security roles worth a look
A few links on CyberJobs.cc are referral links: when one leads to a hire, a sign-up or a purchase (a lab, a course or a tool marked Partner), the company behind it may pay CyberJobs.cc a fee. You pay nothing extra, and it never changes the salary an employer offers you or which roles the board lists. Roles from partners who pay us a fee rank a little higher in this list.

Application Security Engineer – CVE & Vulnerability Research (shows the role here)
Anyone AI · Offensive Security · Remote· 1mo agoDetails
$65/hr



Senior Security Engineer - Vulnerability Research (shows the role here)
Tanium · Offensive Security · Remote· 1mo agoDetails
$191,000–$293,000/yr
A proven pentester or red teamer?
Security teams sometimes ask us directly for someone with a given specialty, clearance or certification. Join the candidate pool once and we put you forward when a brief matches, and only after you say yes. No cost to you.
Hear first when Prescient Security posts a security role
We read Prescient Security's careers system around the clock and send its new security roles in a weekly email, along with comparable openings at other employers. Free; leave whenever you like.