Ethical Hacker jobs in Delhi at CryptoMize are open on a rolling, always-hiring basis — the security practice runs authorized-offense work continuously for clients across every sector we serve. This is a full-time, permanent position with immediate joining, based at our New Delhi HQ: white-hat hacking in the strict sense — vulnerability assessment, authorized exploitation, and risk assessment under written scope, for clients whose defenses genuinely depend on the answers. Below is the complete posting — responsibilities, requirements, the seniority ladder, and the selection process. Hackers whose ethics are load-bearing should read to the end.

LOCATION New Delhi (HQ)

EMPLOYMENT Full-time · Permanent

AVAILABILITY Immediate · Rolling intake

COMPENSATION Discussed at screening

TRACKS ON THIS DESK25

CRAFT SKILLS NAMED12

TOOLS & SYSTEMS5

PATH STAGES4

01 01The actual work What will you actually do as a Ethical Hacker at CryptoMize? 01 Execute vulnerability assessments and authorized penetration engagements across web applications, mobile stacks, networks, and Active Directory environments 02 Create the scripts and tooling that test for vulnerabilities — automation for the repetitive mechanics, hand-work for the chains scanners cannot see 03 Perform risk assessment across client environments, translating findings into likelihood-and-impact terms their leadership decisions on 04 Work inside compliance-heavy client contexts — PCI-DSS, HIPAA, and ISO 27001 environments where findings speak auditor language 05 Research emerging threats and vulnerability classes, folding them into the practice’s testing methodology 06 Support SIEM-relevant detection engineering conversations — your offense makes their detection better 07 Mentor ethical hacker and pentest interns on engagement work — the practice’s pipeline runs through your review discipline ROLE RESPONSIBILITIES As an Ethical Hacker at CryptoMize you will apply hacking skills for defensive purposes — the white hat in its strict definition. You will create scripts that test for vulnerabilities including penetration testing and risk assessment, perform risk assessment across client environments, and document what a determined adversary would actually reach, always under written authorization. The work is standards-adjacent by nature: our clients audit against PCI-DSS, HIPAA, and ISO 27001-class frameworks, and findings that cannot speak compliance language do not get remediated. You will frame vulnerability reality in the vocabulary of the client’s auditors while keeping the technical proof underneath it rigorous — SIEM-relevant, reproducible, and prioritized by genuine risk rather than scanner confidence. Ethical hackers here also carry the research and teaching duties that keep the practice ahead: tracking emerging adversary techniques, folding them into methodology, and mentoring the intern bench. The term white hat refers to exactly this arrangement — skill deployed inside authorization, for the defense of the party that granted it — and the practice defends that arrangement as its defining product. 02 02Capability profile What skills and tools does a Ethical Hacker need? astro-island,astro-slot,astro-static-slot{display:contents} Craft skills12 Tools & systems5 Offer standards4 Advanced web and network exploitation — chained, novel attack paths, not checklist outputActive Directory and enterprise-environment attack expertiseScripting mastery — Python and Bash tooling built per engagementRisk assessment methodology — CVSS-class severity reasoning with business translationCompliance-context fluency — PCI-DSS, HIPAA, ISO 27001, COBIT, NIST frameworksSIEM awareness — how findings become detectionsThreat research — tracking emerging vulnerability classes and adversary techniquesReport craft — reproducible findings, prioritized remediation, zero noiseRules-of-engagement discipline under complex scope boundariesClient communication at technical and executive altitudeMentorship of juniors and internsClearable background and absolute discretion Kali Linux full toolchainBurp Suite Professional and NmapMetasploit Framework with custom module developmentPython/Bash automation toolingMITRE ATT&CK-mapped adversary-technique frameworks Depth of demonstrated skill in the specific role disciplineClassification and scope of the client engagement the role supportsUrgency and time-sensitivity of active project requirementsTrack record built across CryptoMize engagements Also known as: ethical hacker jobs · white hat hacker vacancy · security researcher · vulnerability tester 03 03Seniority ladder Ethical Hacker — seniority path at CryptoMize White-hat advancement follows engagement quality and research contribution — the findings that held, the detections they improved, the juniors they trained. The ladder below is how the security practice is actually organized. Ethical Hacker Owns assessments on assigned engagements with findings sign-off and risk-translation duties. 1/4 Senior Ethical Hacker Leads complex multi-surface engagements, directs methodology and threat research, mentors hackers and interns. 2/4 Offensive Security Lead Runs the authorized-offense capability — adversary simulation programs, standards, and staffing across the practice. 3/4 Security Practice Principal The crossover track: white hats who graduate into principal-level client counsel across the five domains, where the offense-informed judgment defends strategy itself. 4/4 04 04The engagement surface CryptoMize work a Ethical Hacker touches Every role plugs into live engagements across the five Penta-P domains — these are the services your work feeds. Ethical Hacker · Job Opening This seat plugs into 6 live CryptoMize services across the five Penta-P domains — the work below is where yours lands. 6 SERVICESPENTA-P Vulnerability Assessment Penetration Testing Cyber Threat Intelligence Cybersecurity Network Security Security Training WHAT DOES ETHICAL HACKER COMPENSATION DEPEND ON? Compensation is discussed during screening — never a fixed public figure, because it varies per person and per engagement. It depends on:

OFFER CONSTRUCTION FACTOR

01 Depth of demonstrated skill in the specific role discipline 02 Classification and scope of the client engagement the role supports 03 Urgency and time-sensitivity of active project requirements 04 Track record built across CryptoMize engagements