Penetration Tester

About the role

We are seeking a motivated Penetration Tester with 2‑3 years of hands‑on offensive security experience. You will be responsible for uncovering and documenting security weaknesses across a wide range of environments, including web and mobile applications, APIs, Active Directory, networks, cloud platforms, and infrastructure.

Key responsibilities

• Execute penetration tests on web and mobile applications, APIs, AD, network, cloud, and infrastructure.
• Perform vulnerability assessments and validate findings through manual testing and controlled exploitation.
• Follow industry standards such as OWASP, PTES, and NIST during testing engagements.
• Conduct reconnaissance, enumeration, vulnerability analysis, exploitation, and post‑exploitation activities.
• Support red‑team exercises and breach‑and‑attack simulations as needed.
• Collaborate with SOC and ITSM teams to improve overall security posture.

Required profile

• 2‑3 years of practical experience in offensive security.
• Strong knowledge of security testing methodologies and industry frameworks.
• Ability to work independently and produce clear, detailed reports.

Required skills

• Web application penetration testing
• Mobile application security testing
• API security testing
• Active Directory assessment
• Network penetration testing
• Cloud security testing
• Vulnerability assessment and exploitation
• Reconnaissance, enumeration, and post‑exploitation techniques
• Red‑team exercise participation
• Bug bounty program involvement
• Familiarity with OWASP, PTES, and NIST frameworks