{"id":1373574,"url":"https://alion.io/job/audax-senior-penetration-tester","title":"Senior Penetration Tester","company":{"id":3797396,"name":"audax","domain":"audax.io","url":"https://alion.io/company/audax-3","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":80,"open_postings":3,"ghost_share":0.333,"stale_share":0,"repost_share":0.333,"time_to_fill_p50_days":18,"computed_at":"2026-10-23T05:54:15Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":18000,"max_usd":39000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":11},"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"DPO","optional":false},{"name":"Java","optional":false},{"name":"Kubernetes","optional":false},{"name":"Objective-C","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Swift","optional":false}],"status":"live","first_seen_at":"2026-09-28T04:59:49Z","employer_posted_date":"2026-09-28","last_verified_at":"2026-10-23T15:01:11Z","board_verified":true,"closed_at":null,"days_open":25,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":25},"description":"About audax\n audax means courage. To have the courage to change the banking scene, eliminating constraints caused by existing legacy infrastructure. Our mission is to empower banks and financial institutions to scale and modernise at speed, reaching new customers without breaking the bank.\nWe began our journey supplying services to and powering Standard Chartered’s white-label plug and play Banking-as-a-Service (BaaS) solution, Standard Chartered nexus, through our technology capabilities. At audax, we seek go-getters who are hungry for growth and can bring fresh perspectives.\nWebsite - https://audax.io/\nAs a Specialist in Penetration Testing, you will plan and execute intelligence-led security testing engagements to certify Audax platform builds and strengthenthe organization's security posture. Working within the Risk & Delivery function, you will design and operate offensive security tooling and methodologies that emulate real-world adversary behaviour, identify exploitable weaknesses across applications, infrastructure, and mobile platforms, and translate technical findings into clear, risk-rated guidance for engineering and risk stakeholders. You will own the planning, execution, and reporting of assigned testing engagements end-to-end, and contribute to the continuous improvement of testing processes, tooling, and integration with the software delivery lifecycle.\nWhat You'll Do:\nPlan and execute penetration testing engagements across applications, networks, cloud, and mobile platforms, applying a structured testing methodology to certify security control effectiveness for Audax platform builds. \nDesign and build custom scripts, tools, and attack frameworks to emulate adversary tactics, techniques, and procedures (TTPs) across the attack lifecycle, including detection-evasion approaches. \nInvestigate identified vulnerabilities and threats, assess exploitability and business impact, and produce clear, risk-rated findings with corrective action recommendations. \nPrioritize remediation with Engineering, Infrastructure, and Product stakeholders and track findings through to closure, validating remediation effectiveness. \nAdvise stakeholders on risk exposure, likely attack paths, and containment measures to support risk-informed decisions on vulnerabilities the organization could face. \nReverse engineer and assess iOS and Android application binaries to identify exploitation paths, including evasion of root/jailbreak detection controls. \nMaintain and refine testing tooling, playbooks, and internal frameworks based on engagement outcomes and emerging threat intelligence. \nContribute to continuous improvement of penetration testing processes and tooling, including integration with DevSecOps and CI/CD practices. \nAssess cloud and containerised environments (including AWS and Kubernetes) against security best practice as part of engagement scope. \nProduce clear technical and management reporting summarizing test results, risk exposure, and remediation guidance for relevant stakeholders. \nWho You Are:\n6-9 years of hands-on experience in penetration testing and vulnerability management in a global environment, including 3+ years as a lead penetration tester, reverse engineer, researcher, or threat analyst. \nDemonstrated experience testing web applications, mobile applications, and operating systems using techniques including injection, privilege escalation, buffer overflows, fuzzing, and scanning. \nWorking knowledge of tactics, techniques, and procedures (TTPs) used for reconnaissance, persistence, lateral movement, and exfiltration, and of the broader threat and vulnerability landscape, including malware and emerging attack methods. \nProficiency in one or more offensive-security-relevant languages, such as Python, PowerShell, or shell scripting, alongside familiarity with Objective-C, Java, Swift, or Assembly for mobile/OS-level work. \niOS and Android reverse engineering, disassembly, decompilation, and evasion of root/jailbreak detection. \nAbility to write and demonstrate proof-of-concept work from an exploitation/attack perspective, including building and deploying custom modules and tailored payloads for established testing frameworks. \nSolid understanding of networking topologies, protocols, and enterprise infrastructure (switches, routers, firewalls) and their security implications. \nFamiliarity with access control methodologies, intrusion detection, vulnerability and patch management tooling, and endpoint security solutions. \nExperience in cloud security (particularly AWS), container and Kubernetes testing, and DevSecOps/CI-CD practices. \nAbility to communicate technical risk clearly to both technical and non-technical stakeholders, including influencing remediation decisions. \nWhy Join Us?\nBe Part of a Bold Vision - At audax, we’re not just building software - we’re transforming how financial institutions and businesses manage risk, compliance, and growth. Join a team that’s fearless in challenging the status quo.\nFlexible, People-First Workplace - We value the importance of Family, Team, Self. In that order.\nCompetitive Rewards and Startup Perks - We offer competitive salaries and meaningful benefits that look after your well-being.\nPrivacy Notice:\n By submitting your application, you acknowledge that you have read and understood audax’s Privacy Policy for Employees, Freelancers, Contractors and Job Applicants (the “Policy”), and consent to the collection, use and disclosure of your personal data by audax for the purposes set out in the Policy. \nYou may withdraw consent for such collection, use and disclosure, and make an access or correction request in respect of your personal data, in accordance with the Policy by emailing .\nDisclaimer: At Audax, we use AI to support our recruitment process, including reviewing applications and identifying candidates whose skills and experience best match our opportunities. AI assists our recruiters-it does not make hiring decisions. All applications are reviewed by our recruitment team, and hiring decisions are made by people. Please ensure the information you submit is accurate and reflects your own qualifications and experience.","description_format":"text","description_chars":6198,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing","Financial Software & Embedded Finance","Digital Banks & Neobanks"],"lifecycle":[{"event":"open","at":"2026-09-28T05:28:05Z"}],"visa":[],"liveness":{"score":41,"band":"fade","label":"Fading","p_open":1,"p_active":0.74,"p_room":0.55,"age_days":25,"expected_fill_days":18,"reasons":["conf:0","velocity","win:tail"],"computed_at":"2026-10-23T05:54:15Z"},"pay":null,"html_url":"https://alion.io/job/audax-senior-penetration-tester","json_url":"https://alion.io/job/audax-senior-penetration-tester.json","meta":{"generated_at":"2026-10-23T17:50:08Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":27083,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-24T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3797396},"rest":"https://alion.io/mcp/rest/get_company?id=3797396"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Faudax-senior-penetration-tester"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Faudax-senior-penetration-tester"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Faudax-senior-penetration-tester"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/audax-senior-penetration-tester\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Faudax-senior-penetration-tester"}]}