Penetration Tester jobs in Delhi at CryptoMize are open on a rolling, always-hiring basis — client demand for web, Android, and network pentesting runs continuously across our security practice, and we staff ahead of it. This is a full-time, permanent position with immediate joining, based at our New Delhi HQ, executing authorized offensive-security engagements for clients who need to know what a determined adversary would actually reach. Below is the complete posting: the responsibilities, the requirements, the seniority ladder, and the selection process. Testers whose findings developers thank them for should read to the end.
LOCATION New Delhi (HQ)
EMPLOYMENT Full-time · Permanent
AVAILABILITY Immediate · Rolling intake
COMPENSATION Discussed at screening
TRACKS ON THIS DESK25
CRAFT SKILLS NAMED12
TOOLS & SYSTEMS6
PATH STAGES4
01
01The actual work
What will you actually do as a Penetration Tester at CryptoMize?
01
Run commissioned test engagements from kickoff to close: scope confirmation, test windows, communication protocol, and the daily check-ins clients on live systems require
02
Attack web applications the way a real intruder would: map the attack surface, chain the weak points, and demonstrate impact with controlled proof — never destruction
03
Test mobile builds on real devices: storage exposure, interception points, weak certificate pinning, and the trust decisions an app makes about its own server
04
Probe internal networks from a foothold: privilege paths, trust relationships, and the route from one compromised workstation to the crown jewels
05
Write the report the client's engineers will actually work from: reproduction steps, evidence captures, severity with rationale, and fixes that name the file to change
06
Return for verified retests: confirm each fix holds, close what holds, and escalate what was patched in name only
07
Test the human protocol too — authorized phishing simulations and physical-entry checks where the engagement's rules permit
ROLE RESPONSIBILITIES
As a Penetration Tester at CryptoMize you will identify the target systems and the goal for each engagement, review the available information, and undertake the variety of methods available to assess whether a determined adversary could breach the client’s web applications, mobile stacks, or networks — always inside a written authorization, always inside its scope. The penetration-test process is deliberate: reconnaissance before contact, verified exploitation over scanner noise, and evidence that reconstructs the attack path for the client’s engineers.
Testers here are also known as ethical hackers, and the ethics are load-bearing. You will spend your working days attempting to breach computer systems and networks — with explicit permission, within explicit boundaries, and with the client’s defense as the only beneficiary. Every finding carries dual accountability: technical accuracy in what you demonstrated, and professional judgment in how the demonstration is evidenced, stored, and eventually destroyed.
The role carries a standing teaching duty: supervising pentest interns through their first client engagements, reviewing their findings drafts, and feeding conversion decisions. Remote testing of client networks alternates with on-site assessments as engagements require — and the documentation discipline travels with you either way, because at CryptoMize the report is the product; the exploit is just how it was earned.
02
02Capability profile
What skills and tools does a Penetration Tester need?
astro-island,astro-slot,astro-static-slot{display:contents}
Craft skills12 Tools & systems6 Offer standards4
Engagement management on live client systems — communication protocol, windows, rollback triggersAttack-surface mapping before touching anythingChained exploitation demonstrated with controlled proofMobile assessment on real devicesInternal privilege-path probing from a footholdEngineer-readable reporting — reproduction, evidence, named fixesVerified-retest disciplineAuthorized phishing and physical-entry simulation where scope permitsTool judgment — proxy suites, exploit frameworks, custom scripts each in their right placeScope obedience (absolute — the authorization is the job)Clearance eligibility and client-trust verificationTeaching testers the craft through engagement review
Burp Suite Professional (web application testing)Nmap (reconnaissance and enumeration)Metasploit Framework (exploitation)Kali Linux toolchainWireshark (traffic analysis)Custom Python/Bash tooling for engagement-specific needs
Depth of demonstrated skill in the specific role disciplineClassification and scope of the client engagement the role supportsUrgency and time-sensitivity of active project requirementsTrack record built across CryptoMize engagements
Also known as: pen testing jobs · pentester vacancy · ethical hacker · security tester
03
03Seniority ladder
Penetration Tester — seniority path at CryptoMize
Tester progression follows engagement quality — the findings you produced, the clients who requested you back, and the juniors you leveled up. The ladder below is how the security practice is actually organized.
Penetration Tester
Owns full-cycle assessments on assigned engagements, with report sign-off and client-facing findings duties.
1/4
Senior Penetration Tester
Leads multi-platform engagements, defines rules of engagement, reviews all findings, and mentors testers and interns.
2/4
Red Team Lead
Runs the offensive-security capability — adversary simulation programs, methodology standards, and engagement staffing across the practice.
3/4
Security Practice Principal
The crossover track: testers who graduate into principal-level client counsel across the five domains, defending infrastructure at strategy altitude.
4/4
04
04The engagement surface
CryptoMize work a Penetration Tester touches
Every role plugs into live engagements across the five Penta-P domains — these are the services your work feeds.
Penetration Tester · Job Opening
This seat plugs into 6 live CryptoMize services across the five Penta-P domains — the work below is where yours lands.
6 SERVICESPENTA-P
Penetration Testing
Vulnerability Assessment
Website Security
Network Security
Cyber Threat Intelligence
Security Training
WHAT DOES PENETRATION TESTER COMPENSATION DEPEND ON?
Compensation is discussed during screening — never a fixed public figure, because it varies per person and per engagement. It depends on:
# OFFER CONSTRUCTION FACTOR
01 Depth of demonstrated skill in the specific role discipline
02 Classification and scope of the client engagement the role supports
03 Urgency and time-sensitivity of active project requirements
04 Track record built across CryptoMize engagements
