A cybersecurity team in Lalpur, Ranchi is looking for a Junior Penetration Tester. Part-time, on-site, INR 31,000 a month.
Skills that matter
You'll need hands-on experience with penetration testing tools, specifically Burp Suite for web application testing and Metasploit for exploitation. Networking fundamentals matter too, since you can't test what you don't understand at a protocol level. Scripting ability, even at a basic level, helps a lot when a standard tool doesn't quite fit the situation, and you need to build something small yourself.
What you'd be doing
- Run vulnerability scans against client systems within an agreed testing scope
- Use Burp Suite to probe web applications for common flaws like injection points and broken access controls
- Attempt controlled exploitation with Metasploit under senior tester supervision
- Document findings clearly, including exact reproduction steps, for the final client report
- Retest previously identified vulnerabilities after a client applies a fix
A recent engagement revealed a SQL injection flaw in a client's login form, and the interesting part wasn't finding it; it was staying within the agreed rules of engagement while confirming the real impact. That meant demonstrating the vulnerability existed with a controlled, limited proof of concept rather than pulling actual customer data, since the scope explicitly ruled that out. Learning to test rigorously while respecting scope boundaries is one of the harder skills this role teaches early.
Qualifications
A bachelor's degree is required, typically in cybersecurity, information technology, or a related field. Hands-on exposure to the tools used in this role, even from a home lab or a capture-the-flag competition, genuinely helps during the hiring process. This entry-level role requires 9 months of relevant hands-on experience.
Pay and benefits
The role pays INR 31,000 a month for part-time work. This listing on Naukri Mitra includes pro-rated paid leave, flexible in-office scheduling, and performance-based incentives tied to engagement quality. Since the position is on-site in Lalpur, relocation assistance and accommodation support are also available for candidates relocating from elsewhere.
How the part-time schedule works
Hours flex around active engagement timelines because testing work must occur within a client's approved testing window rather than on a fixed daily schedule. This suits someone balancing further certification study, coursework, or another commitment alongside real, paid security testing experience.
Applying
Send a resume along with any relevant lab work, capture-the-flag results, or bug bounty findings you can share. If you're actively working toward a certification like OSCP or eJPT, mention where you are in that process. Shortlisted candidates will walk through a practical testing scenario in the technical interview rather than a purely theoretical exam.
