Senior Penetration Tester

Trading Technologies is hiring a Senior Penetration Tester in Greater Ahmedabad Area, India. The details below summarise the employer's own listing; applications happen on the original posting, not on GetFirstJob.

What the work involves

• Department: Engineering
• Location: Ahmedabad/GiftCity
• Reporting directly to the Offensive Security Manager, you will be the technical tip of the spear in proactively identifying and exploiting vulnerabilities across our entire technology estate
• In this senior technical role, you will lead complex, full-stack security assessments ranging from modern web applications and complex APIs to cloud infrastructure, CI/CD pipelines, and deep-dive Active Directory environments
• Beyond breaking things, you will partner closely with our engineering teams to ensure vulnerabilities are understood and effectively remediated, while also serving as a technical mentor to the broader security team
• Comprehensive Penetration Testing: Lead and execute advanced, end-to-end penetration tests across TT’s entire technology ecosystem, including complex web applications, microservices, REST/WebSocket APIs, internal network infrastructure, and thick-client trading applications
• Cloud & DevOps Security: Conduct targeted assessments against our cloud infrastructure (e.g., AWS, GCP) and containerized environments
• Actively test and identify misconfigurations or vulnerabilities within our CI/CD pipelines to secure our software supply chain
• Infrastructure & Active Directory: Execute internal network penetration tests, including advanced Active Directory abuse and exploitation (e.g., Kerberoasting, lateral movement, privilege escalation) to identify internal structural weaknesses
• Actionable Reporting: Produce comprehensive, high-quality technical reports that clearly articulate vulnerabilities, demonstrate business impact via proof-of-concepts (PoCs), and provide realistic, actionable remediation guidance for engineering teams

What they are looking for

• Trading Technologies is looking for a highly skilled and technically creative Senior Penetration Tester to join our internal Offensive Security (Offsec) team
• Skills, Knowledge and Expertise
• Extensive Experience: 7+ years of hands-on experience in penetration testing, offensive security, or red teaming
• Application & API Expertise: Deep understanding of modern web application and API vulnerabilities (OWASP Top 10, CWEs), authentication protocols (OAuth, SAML), and testing methodologies
• Infrastructure Mastery: Proven experience with network penetration testing, bypassing network segmentation, and conducting complex Active Directory exploitation (using tools like BloodHound, Impacket, Mimikatz, etc.)
• Cloud & CI/CD Proficiency: Strong understanding of cloud-native architectures, containerization (Docker, Kubernetes), and experience finding security flaws in DevOps pipelines (GitLab, GitHub Actions, Jenkins, etc.)
• Tooling & Scripting: Expert-level proficiency with industry-standard offensive tools (e.g., Burp Suite Pro, Metasploit, Cobalt Strike, Nmap)
• Strong programming/scripting abilities in Python, Bash, Go, or PowerShell to write custom tooling or modify exploits

Pay and dates

The listing does not state pay. The source page shows a relative posting age rather than an exact posting date; this role was first seen and checked as open on 4 November 2026. The source page showed it as posted “22 hours ago” when captured; that is a relative stamp, not an exact date.

How to apply

Apply on the listing where the employer published this role: Senior Penetration Tester at Trading Technologies. We found this listing via linkedin.com; it was still open when we checked on 4 November 2026. If the posting has closed or the link fails, the role may have been filled.