Penetration Tester

We are seeking a highly skilled and motivated Penetration Tester to join our cybersecurity team. The ideal candidate will have experience in ethical hacking, vulnerability assessments, and security analysis. You will be responsible for simulating cyberattacks to identify vulnerabilities in applications, networks, and systems, providing actionable insights to improve security posture.

Key Responsibilities:

• Conduct penetration testing on web applications, networks, cloud environments, and mobile applications.
• Identify, exploit, and document security vulnerabilities using industry-standard tools and techniques.
• Perform security assessments, including vulnerability scanning and risk analysis.
• Develop detailed reports outlining findings, risk assessments, and remediation recommendations.
• Stay updated with the latest security threats, attack methodologies, and emerging cybersecurity trends.
• Work closely with developers, IT teams, and security engineers to address security issues.
• Assist in red teaming exercises, social engineering tests, and security audits.
• Conduct security research and contribute to internal security tool development.
• Ensure compliance with industry standards and regulations, such as ISO 27001, NIST, OWASP, and GDPR.

Required Qualifications & Skills:

• Bachelors degree in Computer Science, Cybersecurity, Information Technology, or a related field (or equivalent experience).
• 2+ years of experience in penetration testing, ethical hacking, or cybersecurity assessments.
• Strong understanding of networking, operating systems, and web application security.
• Proficiency with penetration testing tools such as Burp Suite, Metasploit, Nmap, Kali Linux, Nessus, Wireshark, etc.
• Experience with scripting and programming languages (Python, Bash, PowerShell, etc.).
• Familiarity with security frameworks and compliance standards (OWASP, NIST, ISO 27001, etc.).
• Excellent analytical and problem-solving skills.
• Strong written and verbal communication skills for report writing and client interactions.

Preferred Qualifications:

• Industry certifications such as OSCP, CEH, GPEN, OSWE, CISSP, or similar.
• Experience with cloud security testing (AWS, Azure, GCP).
• Knowledge of exploit development, malware analysis, and threat intelligence