Penetration Tester

About the role

We are seeking a driven Penetration Tester with 4‑5 years of hands‑on offensive security experience. The role involves identifying, validating, and documenting security vulnerabilities across web and mobile applications, APIs, Active Directory, networks, cloud environments, and infrastructure.

Key responsibilities

• Run penetration tests across web and mobile applications, APIs, AD, networks, cloud and infrastructure.
• Perform vulnerability assessments and confirm findings through manual testing and controlled exploitation.
• Conduct engagements following standards such as OWASP, PTES and NIST.
• Handle reconnaissance, enumeration, vulnerability analysis, exploitation, and post‑exploitation activities.
• Support red‑team exercises and breach‑and‑attack simulations as needed.
• Collaborate with SOC and ITSM teams to improve overall security posture.

Required profile

• 4‑5 years of hands‑on experience in offensive security.
• Strong technical expertise in offensive security methodologies, industry frameworks and testing tools.
• Hands‑on experience with red‑team exercises.
• Active participation in bug bounty programs.
• Relevant certifications such as OSCP, eCPPT, eWPTX or PNP.

Required skills

• Penetration testing
• Vulnerability assessment
• Manual exploitation
• OWASP, PTES, NIST frameworks
• Reconnaissance and enumeration
• Post‑exploitation techniques
• Red‑team operations
• Collaboration with SOC and ITSM processes