Penetration Tester
Job Description
Conduct penetration testing on applications, networks, servers, and IT infrastructure to identify security vulnerabilities.
Perform vulnerability assessments and security testing to evaluate potential risks and security weaknesses.
Simulate real-world cyberattacks to assess the effectiveness of existing security controls.
Identify, analyze, and document security findings, including vulnerabilities, their potential impact, and recommended remediation steps.
Perform web application, API, network, and infrastructure penetration testing.
Utilize penetration testing tools such as Burp Suite, Nmap, Metasploit, OWASP ZAP, and other relevant security tools.
Prepare detailed penetration testing reports and present findings to technical teams and stakeholders.
Collaborate with developers, network engineers, and security teams to validate findings and support vulnerability remediation.
Conduct retesting to verify that identified vulnerabilities have been properly resolved.
Stay updated on emerging cybersecurity threats, attack techniques, and industry best practices.
Requirements
Minimum 2 years of experience in penetration testing, vulnerability assessment, or a related cybersecurity role.
Strong understanding of networking, operating systems, web technologies, and common security vulnerabilities.
Hands-on experience with penetration testing tools such as Burp Suite, Nmap, Metasploit, or OWASP ZAP.
Knowledge of OWASP Top 10, common attack vectors, and vulnerability assessment methodologies.
Experience conducting web application, API, network, or infrastructure penetration testing.
Familiarity with scripting languages such as Python, Bash, or PowerShell is an advantage.
Understanding of security standards and frameworks such as OWASP, PTES, or NIST is an advantage.
Relevant certifications such as OSCP, CEH, eJPT, or CompTIA PenTest+ are preferred.