Penetration Tester

Job Description

• Conduct penetration testing on applications, networks, servers, and IT infrastructure to identify security vulnerabilities.

• Perform vulnerability assessments and security testing to evaluate potential risks and security weaknesses.

• Simulate real-world cyberattacks to assess the effectiveness of existing security controls.

• Identify, analyze, and document security findings, including vulnerabilities, their potential impact, and recommended remediation steps.

• Perform web application, API, network, and infrastructure penetration testing.

• Utilize penetration testing tools such as Burp Suite, Nmap, Metasploit, OWASP ZAP, and other relevant security tools.

• Prepare detailed penetration testing reports and present findings to technical teams and stakeholders.

• Collaborate with developers, network engineers, and security teams to validate findings and support vulnerability remediation.

• Conduct retesting to verify that identified vulnerabilities have been properly resolved.

• Stay updated on emerging cybersecurity threats, attack techniques, and industry best practices.

Requirements

• Minimum 2 years of experience in penetration testing, vulnerability assessment, or a related cybersecurity role.

• Strong understanding of networking, operating systems, web technologies, and common security vulnerabilities.

• Hands-on experience with penetration testing tools such as Burp Suite, Nmap, Metasploit, or OWASP ZAP.

• Knowledge of OWASP Top 10, common attack vectors, and vulnerability assessment methodologies.

• Experience conducting web application, API, network, or infrastructure penetration testing.

• Familiarity with scripting languages such as Python, Bash, or PowerShell is an advantage.

• Understanding of security standards and frameworks such as OWASP, PTES, or NIST is an advantage.

• Relevant certifications such as OSCP, CEH, eJPT, or CompTIA PenTest+ are preferred.