Senior Penetration Testing Analyst

🕒 September 10

🇮🇳 India – Remote

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Sophos

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 1985

💼 Consulting

🏥 Healthcare

🏭 Manufacturing

💰 Post-IPO Equity on 2021-08

Consulting • Healthcare • Manufacturing

Sophos is a leading cybersecurity company that specializes in protecting businesses against advanced cyber threats. The company offers a comprehensive suite of security solutions, including endpoint protection, managed detection and response (MDR), network security, and cloud security. With a prevention-first approach, Sophos aims to stop ransomware and other cyber threats before they cause harm. Sophos provides services such as threat research, security training, and operational support to ensure robust defense against cyberattacks. Their solutions cater to various industries including finance, healthcare, government, manufacturing, and retail. The Sophos Central platform delivers centralized security management, integrating seamlessly with existing IT infrastructure to enhance security posture.

📋 Description

• Coordinate activities, documentation, readiness schedules, and information between business, clients, and project teams • Act as the point of contact for testing readiness and communicate readiness status • Use project management tools to monitor tasks, responsible parties, timelines, and status • Report and escalate issues to management • Take ownership of new and different requests and identify opportunities to add value • Conduct application security assessments covering web, mobile, and API security, or network penetration testing assessments • Use off-the-shelf and internally developed exploitation tools for manual testing and advanced attacks • Produce and deliver professional security assessment reports containing vulnerability and exploit information • Lead client conference calls covering readiness, troubleshooting, project kick-off, high/critical finding notifications, and close-out reviews • Research new threats, vulnerabilities, and exploits • Conduct exploitation testing and document findings for client remediation • Work independently and as part of a larger team

🎯 Requirements

• 5+ years of experience in Information Security • Minimum of 2 years of experience with penetration testing • Minimum of 2 years of experience with at least one of: Nmap, Metasploit, Kali Linux, Burp Suite • Excellent client-facing and internal written and verbal communication skills • Ability to learn quickly and thrive in a high-energy team environment • Professional, “get it done” attitude, strong work ethic, and team-player approach • Solid organizational skills, attention to detail, and multitasking skills • Experience with NMap scanning • Understanding of web application authentication methods • Understanding of APIs and API authentication methods • Understanding of SOAPUI/Restlet and other API testing tools • Experience with Linux • Understanding of networking appliances, including routers, load balancers, firewalls, WAF, IDS/IPS, and web content filters/proxies • Understanding of tools for validating network access with a penetration testing platform • Applicants must have legal authorization to work in India without employer sponsorship

🏖️ Benefits

• Remote-first working model • Employee-led diversity and inclusion networks • Annual charity and fundraising initiatives • Volunteer days • Global employee sustainability initiatives • Global fitness and trivia competitions • Global wellbeing days • Monthly wellbeing webinars and training • Recruitment and selection process adjustments for applicants with disabilities or other needs