# Penetration Tester Job Opening at CryptoMize Penetration Tester jobs in Delhi at CryptoMize are open on a rolling, always-hiring basis — client demand for web, Android, and network pentesting runs continuously across our security practice, and we staff ahead of it. This is a full-time, permanent position with immediate joining, based at our New Delhi HQ, executing authorized offensive-security engagements for clients who need to know what a determined adversary would actually reach. Below is the complete posting: the responsibilities, the requirements, the seniority ladder, and the selection process. Testers whose findings developers thank them for should read to the end. ## Facts - Location: New Delhi (HQ), CDR Building, Chhatarpur - Type: full-time permanent - Availability: immediate, rolling intake (always hiring) - Compensation: discussed at screening ## What you will actually do - Run commissioned test engagements from kickoff to close: scope confirmation, test windows, communication protocol, and the daily check-ins clients on live systems require - Attack web applications the way a real intruder would: map the attack surface, chain the weak points, and demonstrate impact with controlled proof — never destruction - Test mobile builds on real devices: storage exposure, interception points, weak certificate pinning, and the trust decisions an app makes about its own server - Probe internal networks from a foothold: privilege paths, trust relationships, and the route from one compromised workstation to the crown jewels - Write the report the client\'s engineers will actually work from: reproduction steps, evidence captures, severity with rationale, and fixes that name the file to change - Return for verified retests: confirm each fix holds, close what holds, and escalate what was patched in name only - Test the human protocol too — authorized phishing simulations and physical-entry checks where the engagement\'s rules permit ## Skills - Engagement management on live client systems — communication protocol, windows, rollback triggers - Attack-surface mapping before touching anything - Chained exploitation demonstrated with controlled proof - Mobile assessment on real devices - Internal privilege-path probing from a foothold - Engineer-readable reporting — reproduction, evidence, named fixes - Verified-retest discipline - Authorized phishing and physical-entry simulation where scope permits - Tool judgment — proxy suites, exploit frameworks, custom scripts each in their right place - Scope obedience (absolute — the authorization is the job) - Clearance eligibility and client-trust verification - Teaching testers the craft through engagement review ## Tools - Burp Suite Professional (web application testing) - Nmap (reconnaissance and enumeration) - Metasploit Framework (exploitation) - Kali Linux toolchain - Wireshark (traffic analysis) - Custom Python/Bash tooling for engagement-specific needs ## Questions and answers ### What are the requirements for Penetration Tester jobs at CryptoMize? Demonstrated offensive-security capability — engagements or lab work you can walk through with your methodology and findings — advanced web-application skills, and network/AD attack-path competence. Certifications (OSEP/OSCP/CEH-class) are signals, not substitutes. ### Are the Penetration Tester job openings in Delhi? Yes — full-time at our New Delhi HQ, with remote and on-site client assessment travel as engagements require. ### Is there a pen testing vacancy for freshers? This posting targets experienced testers; freshers enter through the 6-month Penetration Tester Internship, which is the primary conversion channel into these roles. ### What is the career growth for a Penetration Tester at CryptoMize? The ladder runs Penetration Tester → Senior Penetration Tester → Red Team Lead, with a Security Practice Principal track for testers who grow into client counsel. Advancement follows engagement quality, not tenure. ### What is the salary for a Penetration Tester at CryptoMize? Compensation is discussed at screening and depends on demonstrated skill, engagement classification, urgency, and track record. We do not publish figures — each offer is built individually. ### How does the selection process work? Application, a practical assessment (a scoped range engagement with report), and a panel interview with the Red Team Lead plus a practice principal. Typical cycle: two to three weeks. Apply: https://cryptomize.com/careers/job-openings/apply/