Symosis Security
Website:
symosis.com
Job details:
Senior Security Consultant – Penetration Testing & Security Automation
Full-time contract | Remote, India | ₹16–22 lakh per year
Independent contractor engagement; no employee benefits.
About Symosis Security
Symosis Security is a Silicon Valley cybersecurity consulting and engineering firm with delivery teams in the US and India. We help enterprise and public-sector clients assess risk, test defenses, and improve security across applications, cloud platforms, identity, and AI systems.
We’re looking for a hands-on penetration tester who can independently deliver engagements, identify exploitable weaknesses, and produce clear, client-ready reports.
What you’ll do
- Conduct web application, API, and internal/external network penetration tests.
- Manually validate vulnerabilities, test authorization and business logic, and document exploitation evidence.
- Perform Android/iOS testing and authorized adversary simulations based on experience and engagement scope.
- Own testing activities from scope review and execution through reporting, findings walkthroughs, and remediation retesting.
- Build scripts and utilities to improve testing efficiency using Python, PowerShell, Bash, and APIs.
- Use Claude, Codex, GitHub Copilot, or similar tools while reviewing and validating generated code.
Essential qualifications
- 4+ years of hands-on penetration testing experience.
- Ability to independently deliver web/API and network penetration tests beyond automated scanning.
- Strong understanding of authentication, authorization, business logic, common application vulnerabilities, and network exploitation.
- Practical experience with Burp Suite, Nmap, and relevant testing tools.
- Ability to write or modify scripts and troubleshoot technical issues.
- Strong written English and client-ready reporting skills.
- At least one relevant certification: OSCP, OSEP, eCPPT, eWPT/eWPTX, GPEN, GWAPT, CEH Practical, or comparable certification.
Preferred qualifications
- Android/iOS or thick-client penetration testing.
- Active Directory assessments and authorized red team engagements.
- Source-code review, cloud security testing, or AI application security testing.
- Additional certifications such as CISSP or CEH.
How to apply
Apply through LinkedIn and email jobs@symosis.com with:
- Résumé, certifications, notice period, and expected annual contract fee.
- A short description of an engagement you independently delivered.
- Sanitized web, network, and mobile report samples for the areas you have tested. A self-created sample is acceptable; do not share confidential client information.
- An example of a testing script or automation you developed.
Click on Apply to know more.
