Penetration Tester

About the role

The Penetration Tester will lead controlled security assessments across web applications, networks, APIs and systems. Using industry‑standard methodologies, you will identify weaknesses, validate vulnerabilities and help the organization improve its security posture.

Key responsibilities

• Conduct penetration testing on web applications, networks, APIs and infrastructure within defined scopes.
• Perform vulnerability assessments, reconnaissance, exploitation and post‑exploitation activities.
• Identify common issues such as OWASP Top 10 flaws, misconfigurations, authentication problems and other security weaknesses.
• Prepare detailed reports with findings, risk ratings, evidence and remediation recommendations.
• Communicate technical results to developers, security teams and stakeholders and assist in validating fixes.
• Maintain up‑to‑date knowledge of emerging threats, tools and testing methodologies.
• Document testing procedures, lessons learned and contribute to process improvements.

Required profile

• Good understanding of common vulnerabilities, attack vectors and exploitation techniques.
• Familiarity with OWASP Top 10, PTES and the OWASP Testing Guide.
• Knowledge of network protocols, operating systems and basic system architecture.
• Basic scripting/programming skills in Python, Bash or PowerShell.

Required skills

• Burp Suite
• Nmap
• Metasploit
• Kali Linux
• Nessus / OpenVAS
• Wireshark
• Python
• Bash
• PowerShell