Penetration Tester

<ul>
<li>Conduct authorized penetration testing across Web applications, APIs, network infrastructure, eternal and internal environments, cloud environments, and other applicable technology assets</li>
<li>Perform reconnaissance, vulnerability discovery, exploitation, and post-exploitation activities within approved testing scopes.</li>
<li>Identify vulnerabilities including authentication/authorization issues, injection, misconfiguration, access control weaknesses, insecure APIs, and other security flaws.</li>
<li>Validate vulnerabilities through controlled proof-of-concept exploitation.</li>
<li>Perform manual and automated security testing of web applications and APIs.</li>
<li>Assess common application security vulnerabilities based on OWASP methodologies.</li>
<li>Conduct testing beyond automated vulnerability scanning, including business logic and access-control testing.</li>
<li>Review application behavior and identify potential attack paths.</li>
<li>Analyze and prioritize findings based on technical severity, exploitability, and potential business impact.</li>
<li>Prepare comprehensive penetration testing reports covering executive summary, technical findings, evidence / proof of concept, risk rating, business impact, remediation recommendations</li>
<li>Present technical findings to technical and non-technical stakeholders where required.</li>
<li>Work with engineering and client teams to understand identified vulnerabilities.</li>
<li>Perform remediation validation and retesting.</li>
<li>Confirm whether vulnerabilities have been adequately addressed.</li>
<li>Stay updated on emerging vulnerabilities, exploits, attack techniques, and offensive security tools.</li>
<li>Continuously improve penetration testing methodologies and toolsets.</li>
<li>Contribute to internal knowledge sharing, playbooks, and testing methodologies.</li>
<li>Participate in client discussions to understand testing objectives, scope, and technical environments.</li>
<li>Ensure penetration testing activities are delivered according to agreed scope, methodology, timeline, and reporting requirements.</li>
<li>Maintain proper documentation of testing activities and evidence.</li>
</ul><h2>Requirements</h2><ul>
<li>Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Information Systems, or a related field.</li>
<li>Min. 2–4 years of hands-on experience in penetration testing, offensive security, vulnerability assessment, or a closely related cybersecurity role.</li>
<li>Demonstrable experience conducting penetration tests in a professional or client-facing environment.</li>
<li>Strong understanding of networking, operating systems, web technologies, authentication mechanisms, and common security vulnerabilities.</li>
<li>Strong understanding of penetration testing methodologies and vulnerability assessment.</li>
<li>Hands-on experience with web application penetration testing, API security testing, network penetration testing, vulnerability assessment, exploitation and proof-of-concept development</li>
<li>Familiarity with OWASP Top 10 and common web application vulnerabilities.</li>
<li>Working knowledge of Linux and Windows environments.</li>
<li>Understanding of TCP/IP, DNS, HTTP/HTTPS, VPN, firewalls, and network security concepts.</li>
<li>Experience with offensive security tools such as Burp Suite, Nmap, Metasploit, SQLMap, Wireshark, Gobuster/ffuf, or equivalent tools.</li>
<li>Ability to perform manual testing and not rely solely on automated scanners.</li>
<li>Ability to produce clear and technically accurate penetration testing reports.</li>
<li>Have at least one of these certifications:<br>OSCP (Offensive Security Certified Professional)<br>OSEP (Offensive Security Experienced Penetration Testers)<br>OSWA (Offensive Security Web Assessor)<br>OSWE (Offensive Security Web Expert)<br>CREST CRT (CREST Registered Penetration Tester)<br>CREST CCT INF (CREST Certified Tester Infrastructure)<br>CREST CCT APP (CREST Certified Tester Application)<br>GPEN (GIAC Penetration Tester)<br>GXPN (GIAC Exploit Researcher and Advanced Penetration Tester)<br>GWAPT (GIAC Web Application Penetration Tester)<br>GCPN (GIAC Cloud Penetration Tester)<br>eCPPT (eLearnSecurity Certified Professional Penetration Tester)<br>eCPTX (eLearnSecurity Certified Penetration Tester eXtreme)<br>eWPT (eLearnSecurity Web Application Penetration Tester)<br>eWPTX (eLearnSecurity Web application Penetration Tester eXtreme)<br>eMAPT (eLearnSecurity Mobile Application Penetration Tester)<br>PNPT (Practical Network Penetration Tester)<br>ECSA (EC-Council Certified Security Analyst)<br>CPENT (Certified Penetration Testing Professional)<br>LPT (Licensed Penetration Tester)<br>CompTIA Pentest+<br>HTB CPTS (HTB Penetration Testing Specialist Certification)<br>CEH (Certified Ethical Hacker)</li>
</ul><h2>Benefits</h2><ul>
<li>Private Health Insurance</li>
<li>Pension Plan</li>
<li>Training &amp; Development</li>
<li>Performance Bonus</li>
</ul>