Job Description

Position - Penetration Tester

Experience – 2-3 year

Company - ZyBiSys Consulting Services LLP

Location - Bangalore

Role Overview

As Penetration Tester Engineer, you will be responsible for simulating real-world cyberattacks to
identify vulnerabilities, assess risks, and improve security defenses. You will
work closely with security analysts, DevOps, and IT teams to enhance the
organization's resilience against cyber threats.

Key Roles & Responsibilities

·       Perform Web, API, Cloud, and Network penetration testing across FinTech infrastructures.

·       Conduct Red Team & adversary simulations (phishing, lateral movement, privilege escalation, persistence).

·       Execute cloud security assessments with focus on PCI DSS, SOC 2, ISO 27001.

·       Research, develop, and use custom exploits, scripts, and payloads.

·       Identify vulnerabilities, prepare exploit PoCs, and advise on remediation.

·       Deliver executive-level security reports and detailed technical findings.

·       Stay ahead of new exploits, malware tactics, and FinTech-specific attack surfaces.

Required Skills Penetration Testing Tools:

·       Web & API: Burp Suite Pro, OWASP ZAP, Postman, sqlmap

·       Network: Nmap, Nessus, OpenVAS, Hydra, CrackMapExec

·       Exploitation: Metasploit, Cobalt Strike, Empire, Covenant

·       AD/Windows: BloodHound, Mimikatz, Rubeus, PowerView, SharpHound

·       Forensics/Monitoring: Wireshark, tcpdump, Zeek, Suricata

Scripting & Programming:

·       Python, Bash, PowerShell (for exploit scripting & automation).

Certifications (Preferred):

·       OSCP, OSWE, OSEP, CRTO, GPEN, CEH (Practical), eJPTv2.