Infra Penetration Testing - Mumbai

Greeting for the day!
We have an immediate opening for Infra Penetration Testing position with Quess Corp. Below is the job description. Kindly check and acknowledge with your updated resume. 

Company - Quess Corp

Role:   Infra Penetration Testing

Location:  Mumbai (Ghansoli)

Exp: 4+ Years

Work Mode: 5 days work from Office

Job description :

• Execute internal/external PT during non-business hours to reduce production risk
• Leverage Tenable.io/SC, PTBot, and targeted Nmap modules for exposed services/C2 checks
• Validate exploitability and craft safe PoCs for critical findings
• Perform revalidation scans for remediation tickets; confirm closure with evidence
• Run weak-password assessments via WA scripts and targeted dictionaries
• Correlate PT results with Jio TIP advisories and live exploit intel
• Update CSOC/VM portals with validated findings and PoC artefacts
• Coordinate with SOC for any concurrent threat activity observed
• Issue overnight containment and remediation guidance to owners
• Produce prioritized handover with risk scoring and dependencies
• Refine attack paths based on new asset exposures from Jio ASM
• Document learnings to enhance PT runbooks and guardrails

Business Justification:
Provides offensive assurance when business impact is lowest, converting technical exposures into prioritized, evidence-backed actions for Jio leadership.Infra Penetration Testing Experience: Min 4 - 8 years hands-on experience

Tech-Stack & Skills:

• Metasploit / Cobalt Strike / Kali Linux infrastructure penetration testing, exploitation frameworks & post-exploitation techniques
• Tenable.io / Tenable.SC / Nessus vulnerability validation, exploit confirmation & remediation revalidation scanning
• Nmap / Masscan / Shodan / Censys – network reconnaissance, service enumeration, exposed-service identification & attack-surface mapping
• Active Directory Security (BloodHound / Impacket / Mimikatz / Rubeus) – AD attack-path analysis, Kerberoasting & privilege escalation
• Password Auditing (Hashcat / John the Ripper / Hydra / CrackMapExec) – credential assessment & weak-password validation
• Threat Intelligence Platforms (MISP / Recorded Future / Mandiant) – exploit-intel correlation, advisory-driven PT & threat-informed testing
• Attack Surface Management (Mandiant ASM / Censys / ProjectDiscovery) – external exposure analysis & attack-path refinement
• Python / Bash / PowerShell – custom exploit scripting, PT automation & safe PoC development
• MITRE ATT&CK / PTES / OSSTMM / NIST SP 800-115 – TTP mapping, adversary emulation & structured PT methodology
• CVSS v3.1 / EPSS – risk-based finding prioritization, executive reporting & purple team coordination with SOC

Continuous learning on the Job.Infrastructure Security

Please share below details:

Notice Period(Immediate or Serving):

CCTC:

ECTC:

T.exp:

Rel.Exp:

Offer in Hand:

Offered CTC:

C,Loc:

Pref. Loc:

Current Company: (Perm/Contract):

Reason for Change:

How soon you can join: