About the Role
We are seeking a talented Penetration Tester to perform security testing and identify vulnerabilities across web applications, mobile applications, APIs, cloud environments, and network infrastructures. The ideal candidate should possess strong offensive security skills and be able to deliver professional technical reports and remediation recommendations.
Responsibilities
- Conduct Web Application Penetration Testing.
- Perform Mobile Application Security Assessments.
- Execute API Security Testing.
- Conduct Vulnerability Assessments and Security Audits.
- Perform Network Security Assessments.
- Document findings and provide detailed remediation guidance.
- Re-test vulnerabilities after fixes are implemented.
- Support clients during security compliance and audit activities.
Requirements
- 2+ years of hands-on penetration testing experience.
- Strong understanding of OWASP Top 10.
- Experience identifying and exploiting:
- SQL Injection
- XSS
- CSRF
- SSRF
- Authentication & Authorization flaws
- Remote Code Execution vulnerabilities
- Familiarity with Mobile Application Security Testing.
- Knowledge of Network Security fundamentals.
- Strong reporting and communication skills.
Tools & Technologies
- Burp Suite Professional
- Nmap
- Metasploit
- Wireshark
- Nessus
- MobSF
Preferred Certifications
- OSCP (Highly Preferred)
- PNPT
- CEH