Senior Engineer, Cyber Security (Pentesting)

Overview

Lead and execute advanced penetration testing to identify vulnerabilities and strengthen the security posture of LPL's critical systems and applications.

What you'll do

• Perform comprehensive penetration tests across web applications, mobile applications, network infrastructure, cloud platforms, and APIs.
• Conduct vulnerability research and exploit development to assess the true impact of identified weaknesses.
• Develop and implement custom tools, scripts, and methodologies to enhance penetration testing capabilities.
• Collaborate with development, operations, and security teams to communicate findings, recommend remediation strategies, and validate fixes.
• Lead red team exercises and adversarial simulations to evaluate organizational defenses and incident response capabilities.
• Stay current with emerging threats, vulnerabilities, and security technologies, incorporating new insights into testing approaches.
• Mentor junior security engineers and contribute to the development of internal security best practices.
• Prepare detailed technical reports and executive summaries outlining findings, risks, and recommendations.
• Participate in security architecture reviews to provide proactive security input.

What you'll need

• Bachelor's degree in computer science, Information Security, or a related field; or equivalent practical experience.
• 5+ years of experience in penetration testing, ethical hacking, or offensive security roles.
• Proficiency in at least one scripting language (e.g., Python, Ruby, PowerShell, Bash).
• In-depth knowledge of web application vulnerabilities (OWASP Top 10) and associated testing methodologies.
• Experience with various penetration testing tools such as Burp Suite, Metasploit, Nmap, Nessus, Acunetix, etc.
• Understanding of network protocols, operating systems (Windows, Linux), and cloud security principles (AWS, Azure, GCP).
• Familiarity with common security frameworks and standards (e.g., NIST, ISO 27001).
• Exceptional written and verbal communication skills, with the ability to articulate complex technical issues to both technical and non-technical audiences.
• Ability to work independently and as part of a team in a fast-paced environment.

Nice to have

• Relevant certifications such as OSCP, OSCE, GPEN, GWAPT, or eCPPT.
• Master's degree.
• Experience within the financial or wealth management industry.

Details

• Location: Hyderabad.
• Ability to work peak, off-peak, weekend, and holiday shifts.
• Ability to manage through shift changes and effectively transition open and unresolved issues.