04 · Security
Penetration Tester / Ethical Hacker
Break in legally, then write the report that fixes it
- Fresher (India)
- ₹4 – 8 LPA
- Demand
What it is
You are hired to attack a system with written permission, find the ways in, and document them with proof and remediation steps. Web apps, networks, mobile apps and APIs are the usual targets. The report is the deliverable, not the hack.
What you actually do all day
- 1Recon and map the attack surface
- 2Exploit web, API, network and config weaknesses
- 3Write clear reports with risk ratings and fixes
- 4Retest after the developers patch
Core tech stack
Tools
- Burp Suite
- Nmap
- Metasploit
- sqlmap
Knowledge
- OWASP Top 10
- Linux
- HTTP & APIs
Scripting
- Python
- Bash
- PowerShell
Reality check: Never test a system you do not own or have written permission for — that is a crime.
Good fit if: You are relentlessly curious about how things break and can write well.
Your first step
Grind TryHackMe and Hack The Box, then target OSCP. Public writeups are your portfolio.