Penetration Tester

Job Description

1. Conduct high-level assessments across servers, networks, and applications.
2. Serve as the primary point of contact for large clients.
3. Take ownership and leading engagements in collaboration with the team.
4. Engage with customers to communicate project progress and outcomes.
5. Develop structured and detailed action plans for specialized security assessment.
6. Contribute and take ownership of research and development initiatives.
7. Support internal and external knowledge sharing.
8. Provide guidance, mentoring, and training to junior and intermediate-level penetration testers.

Qualification

1. More than 3 years of experience in penetration testing covering web apps, APIs, containers, networks, OS, databases, and cloud environments.
2. Demonstrated expertise in technical documentation and delivering comprehensive security assessment reports.
3. Strong knowledge of offensive security methodologies and secure software development principles.
4. Understanding in OWASP Top 10, NIST, CIS Benchmarks, MITRE ATT&CK, and adversary tactics and techniques.
5. Proficient in scripting with Python, PowerShell, and Bash.
6. Experienced in exploitation methods and defense evasion techniques.
7. Hands-on experience with security tools including Kali Linux, Metasploit, Nessus, Invicti, Nmap, and Burp Suite.
8. Analytical, adaptable, and collaborative.
9. Active industry certifications (OSCP, CREST CRT, OSWA, or comparable)
10. High level of integrity, professionalism, and ethical conduct in handling sensitive security information and systems.