Senior Penetration Tester - Tsaaro Consulting

Job Information

Date Opened

07/31/2026

Job Type

Full time

Industry

Consulting

Work Experience

4-5 years

Salary

-

City

Bangalore

State/Province

Karnataka

Country

India

Zip/Postal Code

560103

Job Description

Join Tsaaro as a Senior Penetration Tester

Hack with Purpose. Strengthen Security. Build Cyber Resilience.

Are you passionate about offensive security, ethical hacking, and helping organizations identify and eliminate security vulnerabilities before attackers can exploit them?

At Tsaaro, we go beyond vulnerability identification—we help organizations proactively strengthen their cybersecurity posture through comprehensive Vulnerability Assessment and Penetration Testing (VAPT), Red Team exercises, cloud security assessments, and offensive security consulting. We are looking for a Senior Penetration Tester who thrives in consulting environments, enjoys solving complex security challenges, and can deliver practical, risk-based security solutions to clients.

About Tsaaro

At Tsaaro, privacy and cybersecurity are at the heart of everything we do. Our team of cybersecurity specialists and privacy consultants works closely with organizations to identify vulnerabilities, assess cyber risks, strengthen security controls, and build resilient cyber defense programs.

Our consulting approach focuses on delivering practical, business-aligned cybersecurity solutions that help clients secure critical assets, reduce cyber risk, achieve compliance, and stay ahead of evolving threats.

Your Role: Senior Penetration Tester

As a Senior Penetration Tester, you will lead and execute Vulnerability Assessment and Penetration Testing (VAPT) engagements across web applications, APIs, mobile applications, networks, cloud environments, and enterprise infrastructure. You will work closely with clients to identify exploitable vulnerabilities, simulate real-world attack scenarios, validate security controls, and provide actionable remediation recommendations to strengthen their overall cybersecurity posture.

Key Responsibilities

• Conduct end-to-end Vulnerability Assessment and Penetration Testing (VAPT) across web applications, APIs, mobile applications, internal and external networks, cloud environments, and enterprise infrastructure.
• Perform manual penetration testing to identify and validate security vulnerabilities beyond automated vulnerability scans.
• Conduct security assessments aligned with industry methodologies such as OWASP Testing Guide, PTES, NIST SP 800-115, and MITRE ATT&CK.
• Identify and exploit vulnerabilities including OWASP Top 10, OWASP API Security Top 10, authentication and authorization flaws, business logic vulnerabilities, insecure configurations, privilege escalation, and infrastructure weaknesses.