Network Penetration Testing - PAN INDIA - CWR

Key responsibilities

• Plan, scope and execute network penetration tests (internal and external) against routers, switches, firewalls, VPNs, wireless networks, servers, and networked appliances.

• Perform reconnaissance, vulnerability discovery, exploit development/use, pivoting, and post-exploitation with a focus on network-layer attacks.

• Conduct wireless security assessments (802.11, WPA2/3, enterprise auth) and assess network segmentation & ACLs.

• Test and validate security of VPNs, remote access solutions, SD-WAN, cloud network interfaces, and network device configurations.

• Simulate advanced adversary techniques (lateral movement, credential harvesting, network pivoting) in a safe, controlled manner.

• Document findings in clear technical reports: impact, reproducible steps, evidence, and prioritized remediation actions.

• Work with engineering, ops, and infrastructure teams to verify fixes and re-test.

• Maintain and expand internal tooling and test labs; keep up with exploit techniques and defensive detections.

• Provide threat modeling input for network architecture and participate in incident response when required.

• Mentor junior testers and contribute to security awareness and training programs.

Required qualifications & skills

• 3+ years experience in network penetration testing, red teaming, or relevant offensive security role.

• Strong hands-on experience with network-level tools and frameworks (examples: Nmap, Nessus/Qualys/OpenVAS, Metasploit, Netcat, Wireshark, tcpdump, Burp Suite for network-adjacent testing).

• Deep knowledge of TCP/IP, routing, switching, VLANs, NAT, ACLs, BGP, OSPF, and common network protocols (DNS, DHCP, SNMP, SMB, LDAP, RDP).

• Experience assessing firewalls, IDS/IPS, VPNs, NAC, and wireless technologies.

• Demonstrated ability to exploit network vulnerabilities and perform post-exploitation lateral movement.

• Strong Linux and Windows admin skills; comfortable with PowerShell, Bash, and basic scripting (Python, Ruby, or similar).

• Familiarity with cloud networking (VPC/VNet architecture, security groups, peering) and how it changes network attack surface.

• Excellent technical writing and oral communication; able to present complex findings to technical and non-technical stakeholders.

• Strong sense of ethics and respect for legal/safe testing practices; experience conducting tests under written rules of engagement.