01Overview
Position: Infrastructure Penetration Testing
Location: Mumbai
Duration: Contract to Hire
Job Description:
Experience: Min 3 - 5 years hands-on experience
Tech-Stack & Skills:
Metasploit / Cobalt Strike / Kali Linux infrastructure penetration testing, exploitation frameworks & post-exploitation techniques
Tenable.io / Tenable.SC / Nessus vulnerability validation, exploit confirmation & remediation revalidation scanning
Nmap / Masscan / Shodan / Censys network reconnaissance, service enumeration, exposed-service identification & attack-surface mapping
Active Directory Security (BloodHound / Impacket / Mimikatz / Rubeus) AD attack-path analysis, Kerberoasting & privilege escalation
Password Auditing (Hashcat / John the Ripper / Hydra / CrackMapExec) credential assessment & weak-password validation
Threat Intelligence Platforms (MISP / Recorded Future / Mandiant) exploit-intel correlation, advisory-driven PT & threat-informed testing
Attack Surface Management (Mandiant ASM / Censys / ProjectDiscovery) external exposure analysis & attack-path refinement
Python / Bash / PowerShell custom exploit scripting, PT automation & safe PoC development
MITRE ATT&CK / PTES / OSSTMM / NIST SP 800-115 TTP mapping, adversary emulation & structured PT methodology
CVSS v3.1 / EPSS risk-based finding prioritization, executive reporting & purple team coordination with SOC
Continuous learning on the Job. .