We are seeking a highly skilled Security Pentester with proven expertise in identifying, exploiting, and documenting vulnerabilities across networks, applications, and systems. The ideal candidate will hold an OSCP certification and possess strong hands-on experience with penetration testing tools, methodologies, and reporting.
Key Responsibilities
- Perform penetration testing on applications, networks, cloud, APIs, and systems to identify vulnerabilities.
- Conduct vulnerability assessments and exploit proof-of-concepts (PoCs).
- Develop and execute threat models and attack simulations.
- Collaborate with development, infrastructure, and security teams to remediate identified vulnerabilities.
- Prepare and deliver detailed reports including risk ratings, technical findings, and mitigation strategies.
- Stay updated on the latest security threats, exploits, and industry trends.
- Ensure compliance with industry standards (e.g., OWASP, NIST, ISO 27001, PCI DSS).
Required Qualifications
- Bachelor's degree in Computer Science, Information Security, or related field, or equivalent experience.
- OSCP certification (mandatory).
- 3-5 years of hands-on penetration testing experience.
- Proficiency with penetration testing tools (Burp Suite, Metasploit, Nmap, Wireshark, Nessus, etc.).
- Strong understanding of web application security, network protocols, operating systems, and cloud environments.
- Knowledge of scripting languages (Python, Bash, PowerShell, etc.) for custom exploit development.
- Excellent problem-solving and report writing skills.
Preferred Qualifications
- Additional certifications: OSWE, OSEP, GPEN, CEH, CREST CRT, or similar.
- Experience with Red Team engagements.
- Familiarity with DevSecOps and CI/CD security testing.
- Understanding of threat intelligence and adversary simulation frameworks (MITRE ATT&CK).
Soft Skills
- Strong communication and presentation skills.
- Ability to work independently and in a team.
- Analytical and detail-oriented mindset.
- Passionate about ethical hacking and continuous learning.
