Penetration Tester

Role overview:

Ever dreamed of legally hacking into systems to make them stronger? We're looking for a Penetration Tester II to join our security-obsessed crew at Astra . If you're the kind of person who’s curious about how systems can be broken (and loves the challenge of fixing them), this is your opportunity to turn that curiosity into real-world impact.

You’ll get hands-on experience with offensive security, collaborate with top minds in the space, and play a vital role in making the internet safer. This is where curiosity meets impact.

At Astra you will be:

• Performing hacker style pentests on our customer’s applications and managing the entire pentest using our one of a kind Pentest platform.
• Carrying out VA/PT for web apps, mobile apps, Cloud infrastructure, SaaS apps, network devices, open-source projects etc.
• Contributing towards building intelligence for our DAST scanner.
• Interacting with clients over remediation calls.
• Facilitating clients to map out the steps for fixing vulnerabilities.
• Maintaining our vulnerability management system.

Requirements

• OSCP or CREST certified
• Strong understanding of OWASPs testing guidelines
• 2-4 years of professional experience in doing pentests on multiple assets including web apps, cloud infrastructure etc.
• Comfortable in Black Box, WhiteBox testing with capability of finding business logic vulnerabilities
• Experience directly interfacing with customers over calls & emails
• Able to understand code in any one programming language

Good to have:

• A few published CVE’s
• A bug bounty/CTF experience

Benefits

• You’ll own your work from day one—no micromanaging, just trust and impact.
• Health Insurance cover for you and your spouse.
• You’ll join a team that’s scaling fast but still feels like a close-knit crew—think startup energy with global reach.
• You’ll be surrounded by curious minds, creative thinkers, and people who genuinely care (and yes, we do have a dedicated meme channel on slack).
• Dive deep into the captivating world of cybersecurity.
• And yes, get ready for some unforgettable workcations—think Chikmagalur & Jim Corbett. The previous one was at Wayanad, KL