Pen Tester- - - - - - - - - - - -Key ResponsibilitiesThe primary responsibility of this role will be to be part of the Blue team, in addition to fulfilling the penetration testing role.1. Penetration Testing (Pentest)<ul><li>Conduct security tests on applications and systems in compliance with ethical standards and recognized methods.</li><li>Evaluate vulnerabilities and assess their exploitability within the IT ecosystem.</li></ul>2. Red Team Operations<ul><li>Actively participate in Red Team missions commissioned by the Group Security Team.</li><li>Simulate real-world attack scenarios to assess defenses and identify improvement areas.</li></ul>3. Threat Hunting<ul><li>Detect vulnerabilities across the IT landscape and ensure appropriate ticket creation and resolution.</li><li>Continuously identify exploitable bugs and proactively address them.</li></ul>4. Development<ul><li>Develop internal tools (scripts, software, APIs, web services) to enhance operational efficiency.</li><li>Automate repetitive tasks and improve existing workflows using custom scripts or software solutions.</li></ul>5. Security Expertise<ul><li>Provide security consultancy to various projects, supporting internal development teams with vulnerability remediation.</li><li>Offer expertise on web technologies, Active Directory/Windows environments, and network systems security.</li></ul>6. Collaboration and Coordination<ul><li>Collaborate with Global Security teams to deliver training, coaching, and best practices.</li><li>Foster a culture of continuous improvement and proactive defense across teams.</li></ul><div></div>Desired ProfileTechnical Skills:<ul><li>Penetration Testing Expertise:<ul><li>Hands-on experience with HackTheBox, TryHackMe, or similar platforms.</li><li>Experience managing Bug Bounty Programs as an Ethical Hacker using relevant tools.</li><li>Proficiency in Burp Suite and IDA Pro (for reversing).</li><li>Strong PowerShell scripting and general scripting capabilities.</li></ul></li><li>Web Development &amp; Security:<ul><li>Understanding of web application development and deployment to simulate attacker perspectives.</li><li>Expertise in penetration tests on web technologies, Active Directory/Windows environments, and networks.</li><li>Familiarity with intrusion tests on industrial control systems is a plus.</li></ul></li><li>Programming &amp; Scripting:<ul><li>Proficiency in languages such as Python, Java, Shell scripting, .NET, and PowerShell.</li><li>Development experience for building tools, automation scripts, or utilities to improve security testing workflows.</li></ul></li><li>Network &amp; System Security:<ul><li>Deep understanding of network security principles and systems security.</li><li>Ability to detect and mitigate vulnerabilities effectively.</li></ul></li></ul>Personal Attributes:<ul><li>Initiative and Autonomy: Ability to work independently with minimal supervision.</li><li>Curiosity and Innovation: Strong curiosity to explore vulnerabilities and exploit potential bugs.</li><li>Collaboration: Adept at working in cross-functional, international teams and different time zones.</li><li>Communication Skills: Strong ability to articulate technical concepts to stakeholders effectively.</li></ul><div></div>Preferred Experience<ul><li>Experience: 10-12 years in cybersecurity roles with a strong focus on penetration testing, threat hunting, and tool development.</li><li>Certifications: Relevant certifications like OSCP, CEH, GIAC, or similar credentials are preferred.</li><li>Hands-On Exposure: Experience with web application and AD/Windows environment penetration tests and network intrusion detection.</li></ul><div></div>

Michelin

Pen Tester Pune

Michelin