Senior Penetration Testing Engineer (3-5 yrs)

Responsibilities :

- Network penetration testing with tools such as Nessus, Nmap, Metasploit.

- Web application testing including advanced usage of Burp Suite Pro.

- TCP/IP networking and ability to troubleshoot connectivity issues.

- Test client's web and/or mobile applications and APIs to expose security weaknesses, being responsible for test quality and resolution of issues that may impede the test effort, for large or complex projects.

- Continuous learning by staying up to date on current testing tools and their applicability to a particular environment.

- Produce penetration testing reports based on testing results.

- Collaborate with program team members to ensure testing runs smoothly.

- Communicate effectively with the penetration testing team.

Qualifications :

- 3-5 years of experience with TCP/IP networking and attacking endpoints at a network level.

- 3-5 years of experience with the Penetration Testing.

- 3+ years of experience in an internal or external cybersecurity role, or similar (e.g., threat/penetration testing, ethical hacking, OWASP top 10, AppScan)

- Collaborative and able to effectively communicate with a team.

- Mandate Certifications in ANY 1 Course : Offensive Security Certified Professional (OSCP), GPEN: GIAC Certified Penetration Tester, OffSec Web Assessor (OSWA), OffSec Web Expert (OSWE), API Security Certified Professional (ASCP), Certified API Security Analyst (CASA)

- Working knowledge of tools such as Burp Suite, Nessus, and the Kali Linux environment.

- Experience with cloud penetration testing including K8S, AWS, and Azure Testing web applications, APIs, mobile applications, physical security, and social engineering (not all required, but multiple are expected).

- Experience with Dradis a plus and knowledge of vulnerabilities and exploits.