Senior Penetration Test Engineer - OSCP, OSEP or OSWE Certification is a must at Sonicwall

Sonicwall

Bengaluru, Karnataka, India·2d ago

SeniorFull-timePythonJavaC++C#

Salary Range

$26,520 - $35,880 /year

Estimated

This salary is estimated based on similar roles. The actual salary may vary.

About the Role

SonicWall is seeking a Penetration Tester to join their cybersecurity team. This role involves performing advanced security testing on SonicWall products including firewalls, firmware, cloud platforms, and web applications.

Key Responsibilities

→Perform advanced penetration testing on SonicWall products including firewalls, firmware, cloud platforms and web applications.
→Conduct manual and automated security assessments to identify vulnerabilities in embedded systems and network devices.
→Support PSIRT vulnerability triage, responsible disclosure and vulnerability coordination with external researchers.
→Conduct secure code reviews for C/C++, Python and embedded firmware components.
→Participate in security design reviews and provide recommendations during development lifecycle.
→Test APIs, web interfaces and management consoles for security weaknesses.
→Perform firmware analysis, reverse engineering, and exploit development to validate vulnerabilities.
→Identify and validate CVEs, publicly known vulnerabilities and provide clear technical reports.
→Work closely with PSIRT, engineering and product teams to reproduce and remediate security issues.
→Develop and maintain penetration testing tools, scripts and automation frameworks.
→Perform attack surface analysis for new and existing products.
→Evaluate authentication, encryption and access control mechanisms in products.
→Research new attack techniques, exploits and emerging threats relevant to SonicWall products and services.
→Validate fixes and perform regression security testing for patched vulnerabilities.
→Produce clear vulnerability reports including risk impact, exploitation steps and remediation guidance.

Requirements

✓University degree in the field of computers or engineering and/or 6 years equivalent work experience.
✓Demonstrable experience in advanced penetration testing on firewalls, firmware, cloud platforms and web applications.
✓Extensive knowledge of tools such as Kali, Nmap, Nessus, Metasploit, Acunetix, etc.
✓2+ years’ experience of Professional Web-Application Development or Source Code Review (C/C++, C#, ASP, PHP, or Java).
✓Proven analytical skills and technical competence.
✓Highly self-motivated and directed.