Penetration Tester

Key Responsibilities

• Perform penetration testing on web applications, APIs, mobile applications, networks, cloud environments, and infrastructure.
• Identify and exploit security vulnerabilities using manual testing and industry-standard tools.
• Conduct vulnerability assessments and validate security findings.
• Perform reconnaissance, enumeration, exploitation, privilege escalation, and post-exploitation activities within authorized environments.
• Assess vulnerabilities based on business impact and risk.
• Document findings with clear technical evidence, risk ratings, and remediation recommendations.
• Prepare detailed penetration testing reports for technical and non-technical stakeholders.
• Work with development, infrastructure, and security teams to validate remediation and perform retesting.
• Stay current with emerging vulnerabilities, attack techniques, security tools, and industry standards.
• Follow established penetration testing methodologies and security best practices.

Required Skills & Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent practical experience.
• Strong understanding of networking, TCP/IP, Linux, Windows, and common security technologies.
• Hands-on knowledge of web application and API security, including OWASP Top 10.
• Experience with penetration testing tools such as Burp Suite, Nmap, Metasploit, Wireshark, and Kali Linux.
• Understanding of authentication, authorization, session management, encryption, and common application vulnerabilities.
• Basic scripting/programming skills in Python, Bash, PowerShell, or similar languages.
• Strong analytical, problem-solving, and documentation skills.
• Ability to communicate technical security findings clearly.