Penetration Tester Junior

About NopalCyber

NopalCyber makes cybersecurity manageable, affordable, reliable, and powerful for companies that need to be resilient and compliant. Through Managed Extended Detection and Response (MXDR), Attack Surface Management (ASM), Breach and Attack Simulation (BAS), and Advisory Services, we fortify our clients’ cybersecurity across both offense and defence.

Our AI-driven Nopal360° platform, NopalGo mobile app, and proprietary Cyber Intelligence Quotient (CIQ) enable organizations to quantify, track, and visualize their cybersecurity posture in real time. We democratize enterprise-grade security operations for organizations of all sizes by lowering the barrier to entry while raising the bar for security and service.

Job location : Nopal Cyber, Hyderabad (Work from Office, 5 Days a Week)

Employment Type : Full-time

Key Responsibilities

• Assist in discovering and inventorying external-facing assets (domains, IPs, cloud services, APIs, etc.) as part of ongoing Attack Surface Discovery (ASD) efforts.
• Help identify unknown, unmanaged, or misconfigured assets and support remediation to improve Attack Surface Management (ASM / EASM).
• Operate and maintain open-source or internal tools for automated asset enumeration, monitoring, and vulnerability scanning.
• Collect and analyse DNS records, SSL certificates, WHOIS data, and public metadata to map assets to the organization.
• Work closely with security, infrastructure, and cloud teams to ensure visibility across on-premises, cloud, and hybrid environments.
• Assist in evaluating and integrating ASM / EASM platforms and automation workflows.
• Support the planning and execution of vulnerability assessments and limited penetration testing of external-facing assets, web apps, and APIs under supervision.
• Run and interpret Dynamic Application Security Testing (DAST) scans (authenticated and unauthenticated) to identify application-layer vulnerabilities.
• Validate, track, and assist with remediation of findings from DAST and ASD activities.
• Stay current with emerging attack vectors and vulnerabilities relevant to attack surface management and web application security.
• Conducting research to identify new attack vectors.

Required Skills & Experience

Educational Qualifications

Personal Attributes