Penetration Tester

About the role

BAMKO is seeking a full‑time Penetration Tester to join its Dehradun office. You will identify and exploit security vulnerabilities across applications, networks, and systems, helping to strengthen the company’s overall security posture.

Key responsibilities

• Plan, execute and document penetration tests on web, mobile, API and infrastructure assets.
• Produce clear, actionable reports and present findings to technical and non‑technical stakeholders.
• Collaborate with engineering and IT teams to recommend and validate remediation measures.
• Participate in red‑team exercises and simulate realistic attack scenarios.
• Stay up‑to‑date with emerging threats, tools and best practices in cybersecurity.
• Contribute to secure development and configuration practices across the organization.

Required profile

• Strong fundamentals in threat modeling, vulnerability assessment and secure network/system configuration.
• Hands‑on experience with penetration testing of web, mobile and API‑based applications.
• Experience in reverse engineering, malware analysis and red‑team operations.
• Bachelor’s degree in Computer Science, Information Security or related field, or equivalent practical experience.
• Relevant certifications such as OSCP, OSCE, CEH or GPEN are highly beneficial.
• Demonstrated commitment to continuous learning and awareness of current security trends.

Required skills

• Burp Suite
• Metasploit
• Nmap
• Wireshark
• IDA Pro
• Ghidra
• Python
• Bash
• PowerShell