Senior Penetration Tester (12-Month Contract)

At Sectigo we align around our mission and pride ourselves in helping thousands of customers sleep better at night. Sectigo is the most innovative provider of certificate lifecycle management (CLM) delivering comprehensive solutions that secure human and machine identities for the world’s largest brands. Sectigo’s automated cloud-native CLM platform issues and manages digital certificates across all certificate authorities (CAs) to simplify and improve security protocols within the enterprise. Sectigo is one of the largest longest-standing and most reputable CAs with more than 700000 customers and two decades of delivering unparalleled digital trust. “When people think Online trust management they think Sectigo because we offer our customers unparalleled peace of mind.” How we show up with each other and our customers every day is just as important and we win as OneSectigo by living out our core values - S upport E xcellence C ommunication T eamwork I ntegrity G rowth and O penness. We are committed to investing in our diverse teams where everyone understands their role and how they support our strategic goals we drive operational excellence through scale and efficiency and we strive to delight our customers and become the market leader in our industry. If you aspire to join a driven team that holds each other accountable to meeting our lofty goals and you’d like to be part of our growth story in delivering a market leading user experience we’d like to talk to you.

Job Description

We are a security-focused organization committed to protecting customers systems and data through proactive risk identification and continuous improvement. We value integrity collaboration technical excellence and accountability and we foster an environment where security professionals can grow innovate and make a measurable impact. The Senior Penetration Tester is responsible for assessing the security of applications platforms and environments through advanced penetration testing techniques. This role requires OSCP certification and extensive hands-on experience identifying exploiting and documenting vulnerabilities across web network and cloud systems. The Senior Penetration Tester works closely with engineering and infrastructure teams to remediate findings and strengthen overall security posture. After-hours or weekend work may be required for critical testing activities and participation in incident response efforts is expected. This is a 12-month contract position ideally working in a hybrid model and reporting to our Chennai office at DLF IT Park Manapakkam at least 3-4 days a week. Here are the core functions responsibilities and expectations for this role Perform penetration testing on web applications APIs mobile applications networks and cloud environments. Identify exploit and validate vulnerabilities to demonstrate business risk and potential impact. Conduct security assessments of platforms and environments including architecture and configuration reviews. Develop clear detailed reports documenting findings risk ratings and actionable remediation recommendations. Collaborate with engineering and development teams to validate remediation efforts and improve security controls. Support incident response activities including forensic analysis and threat validation. Stay current with emerging threats tools and penetration testing techniques. Participate in after-hours or weekend testing as required for critical engagements or incidents. Maintain alignment with applicable industry standards and regulatory requirements. Additional tasks associated with this position may be assigned in response to company initiatives and business needs.

Qualifications

Requirements

OSCP certification is required. 5+ years of experience in penetration testing and security assessments. Strong expertise in web application network and cloud penetration testing. Proficiency with tools such as Burp Suite Metasploit Nmap and other industry-standard frameworks. Solid understanding of OWASP Top 10 MITRE ATT&CK and common exploitation techniques. Proven ability to write detailed technical reports and communicate findings to both technical and non-technical audiences. Experience with scripting and automation using Python Bash and/or PowerShell. Ability to operate effectively in a fast-paced environment and support after-hours or weekend work as needed. Desired

Qualifications

Bachelor’s degree in Computer Science Information Security or a related field. Additional certifications such as OSCE GPEN or CEH. Experience with reverse engineering and malware analysis.

Additional Information

All your information will be kept confidential according to EEO guidelines. Global team. Global reach. Global impact. At Sectigo we believe doing good is good business. Our strength and our success come from our team of passionate engaged individuals who make a difference both locally and globally. Our commitment to engagement is rooted in an unconditionally inclusive workforce embodying our unique perspectives heritages and backgrounds all as diverse as the experiences of each Sectigo employee. Importantly we strive to be recognized not only as the CLM leader but also for our intentional efforts to promote employees into the roles that most challenge and excite them into experiences that allow them to grow their interests as we grow the business. We are committed to bringing a little bit of fun and a whole lot of happiness into everything we do so that our work – and our team members – reflect the positive outcomes we deliver to our customers every day.