Penetration Tester
Ethical hacking to strengthen organizational security through vulnerability discovery.
Role Overview
As a Penetration Tester, you will conduct authorized attacks against our clients’ systems to identify security vulnerabilities before malicious actors can exploit them. This role requires deep technical expertise, creative problem-solving skills, and the ability to think like an attacker while maintaining the highest ethical standards.
You will work with diverse clients across various industries, performing comprehensive security assessments and providing actionable recommendations to improve their security posture. This position offers the opportunity to work with cutting-edge security tools and techniques while making a direct impact on organizational security.
Key Responsibilities
Plan and execute comprehensive penetration testing engagements including network, web application, mobile, and wireless security assessments.
Perform social engineering assessments and physical security testing to evaluate human and physical security controls.
Develop custom exploits and attack tools to test security controls and identify previously unknown vulnerabilities.
Document findings and prepare detailed reports with executive summaries, technical details, and remediation recommendations.
Present findings to technical and non-technical stakeholders, including executives and board members.
Stay current with the latest attack techniques, security tools, and vulnerability research through continuous learning and participation in security communities.
Required Qualifications
Bachelor’s degree in Cybersecurity, Computer Science, or related field, or equivalent professional experience in penetration testing.
5+ years of hands-on experience in penetration testing, vulnerability assessment, or red team operations.
Proficiency in multiple programming languages (Python, PowerShell, Bash) and scripting for automation and exploit development.
Deep understanding of network protocols, operating systems, and common security vulnerabilities (OWASP Top 10, CVE database).
Advanced certifications such as OSCP, GPEN, CEH, or similar penetration testing credentials required.
Experience with penetration testing frameworks (Metasploit, Cobalt Strike) and security assessment tools.
