We are seeking a skilled and motivated Penetration Tester with 3 to 4 years of experience in the field of cybersecurity. The successful candidate will be responsible for conducting thorough security assessments, identifying vulnerabilities, and recommending mitigations to improve the security posture of our systems, networks, and applications. You will work closely with other security professionals to ensure proactive protection of our organization against evolving threats.
Key Responsibilities
Penetration Testing: Perform black-box, white-box, and grey-box penetration tests on web applications, APIs, and internal systems to identify security vulnerabilities and weaknesses.
Vulnerability Assessment: Conduct vulnerability assessments using a variety of tools (e.g., Nessus, Nexpose, OpenVAS) to identify and evaluate potential threats.
Exploitation & Reporting: Safely exploit identified vulnerabilities to demonstrate their impact and provide clear, actionable recommendations for remediation.
Security Audits: Conduct security audits and risk assessments, including network, system, and web application security reviews.
Collaboration: Work with internal teams, including developers, sysadmins, and IT staff, to assist in addressing security flaws and ensuring that remediation strategies are effectively implemented.
Documentation & Reporting: Create detailed reports that summarize findings, provide risk analysis, and suggest corrective actions, tailored to both technical and non-technical stakeholders.
Continuous Learning & Development: Stay up to date with emerging security trends, new attack techniques, and evolving technologies to improve personal knowledge and overall team capabilities.
Incident Response: Assist in investigating security incidents and breaches, performing forensics, and helping to identify root causes.