Senior Penetration Tester

About the role

The Senior Penetration Tester leads advanced security assessments across network, system, application, and cloud environments. You will act as a trusted advisor, guiding clients through risk identification, exploitation, and remediation while mentoring junior team members.

Key responsibilities

• Plan, scope, and execute comprehensive penetration testing engagements for diverse services.
• Collaborate with clients to define objectives, methodologies, and success criteria.
• Perform manual and automated testing to discover, validate, and exploit complex vulnerabilities.
• Utilize and customize tools such as Nmap, Zmap, Burp Suite, OWASP ZAP, SQLmap, Metasploit, Nessus, and OpenVAS.
• Analyze findings, assess risk severity, and deliver actionable remediation recommendations.
• Prepare detailed technical and executive reports and present results to both technical and non‑technical stakeholders.
• Mentor junior testers, review their work, and provide technical direction.
• Stay current with emerging threats, attack techniques, and industry best practices.

Required profile

• In‑depth knowledge of penetration testing methodologies, frameworks, and security vulnerabilities.
• Strong understanding of networking protocols, operating systems, web applications, and APIs.
• Excellent written and verbal communication skills for technical reporting and client interaction.
• Ability to work independently, lead engagements, and manage multiple projects in a fast‑paced environment.
• Bachelor’s or Master’s degree in Computer Science, Information Security, or related field.
• 3–5 years of hands‑on penetration testing experience.
• Relevant certifications such as OSCP, CEH, GPEN, or GWAPT.

Required skills

• Nmap
• Zmap
• Burp Suite
• OWASP ZAP
• SQLmap
• Metasploit
• Nessus
• OpenVAS
• Networking protocols
• Operating systems
• Web applications
• APIs