Penetration Tester

Role overview:

Ever dreamed of legally hacking into systems to make them stronger? We're looking for a Penetration Tester II to join our security-obsessed crew at Astra. If you're the kind of person whos curious about how systems can be broken (and loves the challenge of fixing them), this is your opportunity to turn that curiosity into real-world impact.

Youll get hands-on experience with offensive security, collaborate with top minds in the space, and play a vital role in making the internet safer. This is where curiosity meets impact.

At Astra you will be:

• Performing hacker style pentests on our customers applications and managing the entire pentest using our one of a kind Pentest platform.
• Carrying out VA/PT for web apps, mobile apps, Cloud infrastructure, SaaS apps, network devices, open-source projects etc.
• Contributing towards building intelligence for our DAST scanner.
• Interacting with clients over remediation calls.
• Facilitating clients to map out the steps for fixing vulnerabilities.
• Maintaining our vulnerability management system.

Requirements

• OSCP or CREST certified
• Strong understanding of OWASPs testing guidelines
• 2-4 years of professional experience in doing pentests on multiple assets including web apps, cloud infrastructure etc.
• Comfortable in Black Box, WhiteBox testing with capability of finding business logic vulnerabilities
• Experience directly interfacing with customers over calls & emails
• Able to understand code in any one programming language

Good to have:

• A few published CVEs
• A bug bounty/CTF experience

Benefits

• Youll own your work from day oneno micromanaging, just trust and impact.
• Health Insurance cover for you and your spouse.
• Youll join a team thats scaling fast but still feels like a close-knit crewthink startup energy with global reach.
• Youll be surrounded by curious minds, creative thinkers, and people who genuinely care (and yes, we do have a dedicated meme channel on slack).
• Dive deep into the captivating world of cybersecurity.
• And yes, get ready for some unforgettable workcationsthink Chikmagalur & Jim Corbett. The previous one was at Wayanad, KL