Cyber Security Consultant - Pentesting

Location: India

• Individuals with technical expertise on one or more cyber security or information security topics
• Recognized as consultant for cyber domains with internal teams and business.
• Assist functional head in building technical capabilities, strategic cyber roadmaps and team competencies based on priorities and policies of Group and GSC.
• Work as technical expert for the domain(s) and execute cyber programs of medium to complex nature and support in delivery.
• Help functional manager in identifying technical loopholes in processes and interdependencies.
• Develop holistic solutions and manage transversal cyber programs.
• Act as a consultant on key cyber topics.
• Stakeholder management and relationship building with technical counterparts Individuals with technical expertise on one or more cyber security or information security topics.
• Recognized as consultant for cyber domains with internal teams and business.
• Assist functional head in building technical capabilities, strategic cyber roadmaps and team competencies based on priorities and policies of Group and GSC.
• Work as technical expert for the domain(s) and execute cyber programs of medium to complex nature and support in delivery.
• Help functional manager in identifying technical loopholes in processes and interdependencies.
• Develop holistic solutions and manage transversal cyber programs.
• Act as a consultant on key cyber topics.
• Stakeholder management and relationship building with technical counterparts.

• 7 to 10 years of relevant work experience in Infrastructure Penetration Testing , Network Security Assessments, Red Teaming, or related areas

• Expert in conducting infrastructure penetration testing across internal networks, external network perimeters, cloud environments, and hybrid infrastructures

• Perform network, server, and system‑level security assessments including on‑prem, cloud (AWS/Azure/GCP), and virtualization platforms

• Identify vulnerabilities, misconfigurations, weak authentication mechanisms, insecure protocols, and privilege escalation paths

• Perform Active Directory security assessments including Kerberos attacks, NTLM abuse, delegation issues, lateral movement, and domain persistence techniques

• Execute external and internal network assessments , VPN testing, firewall rule reviews, and segmentation testing

• Conduct configuration review for operating systems, servers, devices, and security controls using CIS benchmarks and hardening guidelines

• Validate security of identity and access management (IAM) , authentication, authorization, password policies, and privilege models

• Perform post‑exploitation activities such as pivoting, credential harvesting, lateral movement, and data exfiltration simulations

• Prepare detailed penetration testing reports including risk rating, impact analysis, proof‑of‑concept, and remediation guidance

• Communicate findings clearly to technical and non‑technical stakeholders

Infrastructure & Network Knowledge

• Strong understanding of networking concepts : TCP/IP, DNS, DHCP, SMTP, HTTP/S, SNMP, VPNs, firewalls, IDS/IPS
• Thorough understanding of enterprise infrastructure architectures
• Hands‑on experience with Windows, Linux, and Unix operating systems
• Knowledge of security standards, frameworks, and methodologies (OWASP, MITRE ATT&CK, NIST, ISO 27001, PTES)

Within Societe Generale Global Solution Center (SGGSC), you will join Global AppSec domain team based out of Bengaluru, working in Pentest team to contribute to Global Pentest practice.

At Société Générale, we are convinced that people are drivers of change, and that the world of tomorrow will be shaped by all their initiatives, from the smallest to the most ambitious.
Whether you’re joining us for a period of months, years or your entire career, together we can have a positive impact on the future. Creating, daring, innovating and taking action are part of our DNA.
If you too want to be directly involved, grow in a stimulating and caring environment, feel useful on a daily basis and develop or strengthen your expertise, you will feel right at home with us!
Still hesitating?
You should know that our employees can dedicate several days per year to solidarity actions during their working hours, including sponsoring people struggling with their orientation or professional integration, participating in the financial education of young apprentices and sharing their skills with charities. There are many ways to get involved.
We are committed to support accelerating our Group’s ESG strategy by implementing ESG principles in all our activities and policies. They are translated in our business activity (ESG assessment, reporting, project management or IT activities), our work environment and in our responsible practices for environment protection.