Location: India (Remote)

Salary: 2,000,000 - 2,500,000 INR/year (DOE)

About Cognisys

Cognisys is a global cybersecurity company specialising in Penetration Testing, GRC Consulting and Managed Security services. We work with organisations across more than 30 countries, helping them identify risk, strengthen their security posture and navigate an increasingly complex cybersecurity landscape.

We're a small but mighty team with ambitious plans for growth. We combine deep technical expertise with a strong focus on customer service, practical advice and delivering meaningful outcomes for our clients.

Our people are at the heart of what we do. We value Together, Ownership, Momentum and Excellence, and we're looking for people who are curious, collaborative and willing to take ownership of their work.

As we continue to grow, you'll have the opportunity to work alongside experienced cybersecurity professionals, contribute to challenging client engagements and help shape how we deliver our services. We believe in giving our people the opportunity to develop, share ideas and make a genuine impact.

The Opportunity

We're looking for a Penetration Tester to join our growing team and help clients identify and address security weaknesses across a range of technical environments.

You'll deliver security assessments across networks, applications, APIs, mobile platforms and cloud infrastructure, using a combination of automated tools and manual testing techniques to simulate real-world attack scenarios and identify meaningful vulnerabilities.

This is a client-facing role, so technical ability is only part of the picture. You'll also need to produce high-quality reports, explain findings clearly and help clients understand the potential impact of vulnerabilities and the practical steps they can take to improve their security.

You'll work closely with the wider cybersecurity team, contribute to the quality of our penetration testing services and continue developing your technical expertise as the threat landscape evolves.

About You

We're looking for someone with a strong technical foundation in offensive security who enjoys investigating how systems can be compromised and helping organisations improve their security.

You'll be curious, methodical and comfortable working through technical challenges. You'll also understand that good penetration testing involves more than finding vulnerabilities: it means validating the risks, explaining their significance and giving clients recommendations they can act on.

You should be comfortable taking responsibility for your work, managing competing priorities and working collaboratively with colleagues and clients.

Essential Skills & Experience

• Hands-on experience conducting penetration tests or security assessments.

• Experience using vulnerability scanning tools alongside manual testing and exploitation techniques.

• A solid understanding of offensive security methodologies, tools and techniques.

• Practical experience assessing technical security controls, identifying weaknesses and validating vulnerabilities.

• Experience in one or more of the following areas:

  • Network penetration testing

  • Web application testing

  • API testing

  • Mobile application testing

  • Cloud security testing

• Strong analytical, investigative and problem-solving skills.

• The ability to document technical findings accurately and produce clear, actionable reports.

• Strong written and verbal communication skills, including the ability to explain technical risks to non-technical audiences.

• A professional approach to client engagement and customer service.

• The ability to manage workload, prioritise tasks and deliver work to agreed deadlines.

• A proactive approach to learning and keeping up to date with developments in offensive security.

Desirable Skills & Experience

• Experience working in a cybersecurity consultancy or professional services environment.

• Exposure to a broad range of technologies, infrastructure and client environments.

• Experience presenting findings and remediation recommendations directly to clients.

• Experience with cloud platforms such as AWS, Microsoft Azure or Google Cloud.

• Experience testing APIs and mobile applications.

• An interest in emerging attack techniques, security research and the continued development of penetration testing tools and methodologies.

Certifications

The following certifications are highly regarded:

Industry-recognised penetration testing certifications are highly regarded and may include:

• OSCP

• CPSA

• CRT

• CREST-related certifications

• Other relevant offensive security or penetration testing certifications

Certifications are valued, but practical experience and the ability to demonstrate hands-on technical capability are equally important.

What Success Looks Like

• Success in this role means delivering technically sound penetration tests while building client confidence through clear communication, reliable delivery and practical recommendations.

• You'll know you're succeeding when you:

• Deliver thorough, accurate and professional penetration testing engagements across a variety of client environments.

• Confidently combine automated scanning with manual testing and exploitation to identify and validate meaningful vulnerabilities.

• Demonstrate a practical understanding of how security controls can be tested, bypassed and exploited in realistic attack scenarios.

• Produce clear, well-evidenced reports that explain vulnerabilities, their potential impact and actionable remediation steps.

• Communicate findings effectively to technical teams and non-technical stakeholders, helping clients understand and prioritise risk.

• Take ownership of your engagements, managing testing, documentation, deadlines and deliverables effectively.

• Build positive client relationships and contribute to a professional, helpful client experience throughout each engagement.

• Keep your technical knowledge current by learning about emerging vulnerabilities, tools, attack techniques and industry developments.

• Share knowledge with colleagues and contribute to improving Cognisys' penetration testing methodologies and ways of working.

Why Join Us?

At Cognisys, you will be part of a collaborative and innovative team that values your input and shares support. You'll have the opportunity to work on challenging projects that make a real impact for our clients. We'd love to hear from you if you want to challenge, lead and innovate! We're not just about the work; we're about the people. Join a team where innovation is celebrated, and your contributions are valued. We foster a collaborative environment where fresh ideas thrive, and professional growth is encouraged.

What we Offer:

• Annual Leave: 23 days per year plus 10 Indian public holidays (5 national plus 5 state holidays of your choosing).

• Additional Leave: 1 day of paid leave for your Birthday.

• Health & Wellbeing: Individual healthcare insurance plan and access to an employee mental health and wellbeing platform.

• Professional Development: £2,000 annual training budget to support your continued learning and career growth.

• Referral Bonus: help to grow our team and earn up to £2,000 per successful referral.

Applications

We’re always happy to help with questions, but to keep our process fair for everyone, we’re unable to accept applications via email—please apply directly through the job advert page.

Please feel free to reach out to Andrea, our Talent Acquisition Lead, if you would like any further information, to discuss accessibility requirements, or if you require this information provided in an alternative format – andrea.smith@cognisys.co.uk

We welcome applications from candidates from a range of diverse backgrounds and can make various reasonable adjustments to consider individual needs.