Penetration Tester

About the role

The Penetration Tester will proactively identify security weaknesses across the organization’s digital assets. Using both manual and automated techniques, you will simulate real‑world attacks to evaluate the effectiveness of existing controls and provide actionable remediation guidance.

Key responsibilities

• Plan, execute, and manage penetration testing engagements on networks, web and mobile applications, and other systems.
• Utilize a mix of manual testing and tools such as Nmap, Metasploit, Burp Suite, and Kali Linux to uncover vulnerabilities.
• Simulate realistic attack scenarios and assess security controls.
• Analyze findings, produce detailed reports, and communicate recommendations to technical and non‑technical stakeholders.
• Collaborate with development and security teams to verify remediation.
• Stay current with emerging threats, attack techniques, and testing methodologies.
• Develop and maintain testing scripts, methodologies, and tools.
• Mentor junior team members and contribute to security research.

Required profile

• In‑depth knowledge of common attack vectors, OWASP Top 10, and exploitation techniques.
• Strong understanding of network protocols, operating systems, and web application architectures.
• Familiarity with penetration testing frameworks such as PTES and the OWASP Testing Guide.
• Awareness of security regulations and compliance standards.

Required skills

• Nmap
• Metasploit
• Burp Suite
• Kali Linux
• Python
• Bash
• PowerShell