Penetration Tester

What youwill do

• Run penetrationtests on websites, APIs, and Android and iOS apps.
• Agree the scopeand rules with each client before testing, and test only what they approve.
• Check andconfirm the issues our automated scans find.
• Write clearreports: a plain-English summary for business owners and technical steps fordevelopers.
• Retest afterfixes to confirm each issue is closed.
• Build ourtesting checklist and report template.
• Help us applyfor and keep our CSA Penetration Testing Service Licence.

Certificationsyou must have

• OSCP orOSCP+ (OffSec Certified Professional). Required.

Plus at leastone of these is preferred:

• OSWE (OffSecWeb Expert), for advanced web app testing
• CREST CRT (RegisteredPenetration Tester)

Experienceyou must have

• At least 2years of real penetration testing for clients.
• Web and APItesting with Burp Suite Professional.
• Mobile apptesting (for example with Frida or MobSF).
• Clear writtenEnglish.
• Able to pass abackground check for the CSA licence.

How to apply

Attach the following in your application.

1. Your CV

2. Your certificate IDs, so we can verify them.

3. One sample report you wrote, with client detailsremoved.