Penetration Tester

Scope of Work:

• Lead and execute comprehensive penetration tests and vulnerability assessments across systems, networks, applications, and infrastructure to identify security weaknesses.
• Collaborate with stakeholders to define scope, objectives, and rules of engagement for penetration testing exercises.
• Develop and execute advanced penetration testing methodologies, emulating real-world attacker tactics, techniques, and procedures.
• Lead red team engagements to simulate sophisticated cyber attacks, helping organizations identify gaps in their defense mechanisms.
• Analyze assessment results to identify, classify, and prioritize vulnerabilities based on potential impact and risk.
• Collaborate with cross-functional teams to provide clear and actionable recommendations for remediation and risk mitigation.
• Create detailed and comprehensive penetration testing reports, translating technical findings into non-technical language for stakeholders.
• Lead efforts to validate the effectiveness of security controls and ensure that vulnerabilities are effectively remediated.
• Provide expert insights and guidance to improve security practices, architecture, and configurations based on assessment results.
• Stay current with emerging threat trends, new attack techniques, and industry best practices, enhancing penetration testing methodologies.
• Participate in incident response exercises and post-incident analysis to improve incident detection and response capabilities.
• Lead training sessions and mentor junior penetration testers, sharing knowledge and fostering skill development within the team.
• Collaborate with regulatory compliance teams to ensure adherence to industry regulations and standards.
• Engage with external partners and industry communities to share insights, contribute to research, and stay at the forefront of penetration testing advancements.

Skills:

      •     Advanced Penetration Testing Techniques

      •     Complex Network and System Architecture Knowledge

      •     Vulnerability Assessment

      •     Exploit Development

      •     Web Application Security Assessment

      •     Wireless Security Testing

      •     Red Teaming Experience

      •     Report Writing and Communication

Tools:

      •     Metasploit

      •     Burp Suite

      •     Wireshark

      •     Nmap

Certification (Optional but beneficial):

      •     Offensive Security Certified Professional (OSCP)

      •     Certified Penetration Testing Professional (CPENT)

      •     GIAC Penetration Tester (GPEN