Penetration Tester - India

Cognisys is a global cybersecurity company specialising in Penetration Testing, GRC Consulting and Managed Security services. We work with organisations across more than 30 countries, helping them identify risk, strengthen their security posture and navigate an increasingly complex cybersecurity landscape.

We're a small but mighty team with ambitious plans for growth. We combine deep technical expertise with a strong focus on customer service, practical advice and delivering meaningful outcomes for our clients.

Our people are at the heart of what we do. We value Together, Ownership, Momentum and Excellence, and we're looking for people who are curious, collaborative and willing to take ownership of their work.

As we continue to grow, you'll have the opportunity to work alongside experienced cybersecurity professionals, contribute to challenging client engagements and help shape how we deliver our services. We believe in giving our people the opportunity to develop, share ideas and make a genuine impact.

We're looking for a Penetration Tester to join our growing team and help clients identify and address security weaknesses across a range of technical environments.

You'll deliver security assessments across networks, applications, APIs, mobile platforms and cloud infrastructure, using a combination of automated tools and manual testing techniques to simulate real-world attack scenarios and identify meaningful vulnerabilities.

This is a client-facing role, so technical ability is only part of the picture. You'll also need to produce high-quality reports, explain findings clearly and help clients understand the potential impact of vulnerabilities and the practical steps they can take to improve their security.

You'll work closely with the wider cybersecurity team, contribute to the quality of our penetration testing services and continue developing your technical expertise as the threat landscape evolves.

We're looking for someone with a strong technical foundation in offensive security who enjoys investigating how systems can be compromised and helping organisations improve their security.

You'll be curious, methodical and comfortable working through technical challenges. You'll also understand that good penetration testing involves more than finding vulnerabilities: it means validating the risks, explaining their significance and giving clients recommendations they can act on.

You should be comfortable taking responsibility for your work, managing competing priorities and working collaboratively with colleagues and clients.

Hands-on experience conducting penetration tests or security assessments.

Experience using vulnerability scanning tools alongside manual testing and exploitation techniques.

A solid understanding of offensive security methodologies, tools and techniques.

Practical experience assessing technical security controls, identifying weaknesses and validating vulnerabilities.

Strong analytical, investigative and problem-solving skills.

The ability to document technical findings accurately and produce clear, actionable reports.

Strong written and verbal communication skills, including the ability to explain technical risks to non-technical audiences.

A professional approach to client engagement and customer service.

The ability to manage workload, prioritise tasks and deliver work to agreed deadlines.

A proactive approach to learning and keeping up to date with developments in offensive security.

Experience working in a cybersecurity consultancy or professional services environment.

Exposure to a broad range of technologies, infrastructure and client environments.

Experience presenting findings and remediation recommendations directly to clients.

Experience with cloud platforms such as AWS, Microsoft Azure or Google Cloud.

Experience testing APIs and mobile applications.

An interest in emerging attack techniques, security research and the continued development of penetration testing tools and methodologies.

Industry-recognised penetration testing certifications are highly regarded and may include:

Other relevant offensive security or penetration testing certifications

Certifications are valued, but practical experience and the ability to demonstrate hands-on technical capability are equally important.

Success in this role means delivering technically sound penetration tests while building client confidence through clear communication, reliable delivery and practical recommendations.

Deliver thorough, accurate and professional penetration testing engagements across a variety of client environments.

Confidently combine automated scanning with manual testing and exploitation to identify and validate meaningful vulnerabilities.

Demonstrate a practical understanding of how security controls can be tested, bypassed and exploited in realistic attack scenarios.

Produce clear, well-evidenced reports that explain vulnerabilities, their potential impact and actionable remediation steps.

Communicate findings effectively to technical teams and non-technical stakeholders, helping clients understand and prioritise risk.

Take ownership of your engagements, managing testing, documentation, deadlines and deliverables effectively.

Build positive client relationships and contribute to a professional, helpful client experience throughout each engagement.

Keep your technical knowledge current by learning about emerging vulnerabilities, tools, att