Penetration Tester

Company Description Self-Practice is a growing organization focused on strengthening the security posture of modern digital environments. The company prioritizes hands-on offensive security assessments to help clients identify and remediate vulnerabilities before they can be exploited. Team members collaborate closely to design realistic attack scenarios and deliver actionable recommendations. Self-Practice values continuous learning, professional integrity, and practical problem-solving. The work environment supports knowledge sharing and encourages staying current with emerging threats and security techniques.
Role Description This is a full-time, on-site Penetration Tester role based in Hyderabad. The Penetration Tester will perform security assessments on web, mobile, and infrastructure components, including vulnerability identification, exploitation, and reporting. Responsibilities include planning and executing penetration tests, documenting findings with clear proof-of-concept details, and presenting remediation guidance to technical and non-technical stakeholders. The role involves collaborating with security and engineering teams to reproduce issues, verify fixes, and contribute to secure design reviews. The Penetration Tester is expected to stay updated on emerging attack vectors, tools, and frameworks, and to participate in internal knowledge-sharing initiatives and continuous improvement of testing methodologies.
Qualifications
Strong skills in Application Security and Cybersecurity, including assessment of web, mobile, API, and network systems.
Experience with Red Teaming activities, such as adversary simulation, lateral movement, and privilege escalation in complex environments.
Proficiency in Reverse Engineering and Malware Analysis for understanding binaries, deconstructing payloads, and analyzing malicious behavior.
Hands-on experience with common penetration testing tools and frameworks (e.g., Burp Suite, Metasploit, Nmap, Wireshark, Kali Linux).
Solid understanding of secure coding concepts, common vulnerabilities (e.g., OWASP Top 10), and industry standards such as MITRE ATT&CK.
Ability to produce clear, structured technical reports and communicate findings effectively to diverse stakeholders.
Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent practical experience.
Relevant certifications (e.g., OSCP, OSCE, GPEN, CEH) are an advantage but not mandatory.
Demonstrated curiosity, ethical mindset, and commitment to responsible disclosure and security best practices.

Work arrangement
No