Security Penetration Tester

Job Summary:
We are seeking an experienced Security Penetration Tester with a minimum of 5 years of hands-on experience in identifying and mitigating security vulnerabilities in software, systems, and networks. The ideal candidate will be responsible for conducting security assessments and penetration testing to ensure the robustness of our organization's security posture.

Key Responsibilities:

Penetration Testing: Plan and execute penetration tests and security assessments on various systems, networks, and applications to identify vulnerabilities and weaknesses.

Vulnerability Analysis: Analyze and document security vulnerabilities, their severity, and potential impacts. Provide clear and actionable recommendations for remediation.

Ethical Hacking: Simulate real-world cyberattacks, applying ethical hacking techniques to assess and strengthen the security of our digital assets.

Security Assessments: Conduct in-depth security assessments of web applications, mobile applications, APIs, and network infrastructure.

Red Team Exercises: Participate in red team exercises to evaluate the organization's readiness to respond to security incidents.

Reporting: Prepare detailed penetration testing reports with findings, recommendations, and suggested remediation strategies. Present results to technical and non-technical stakeholders.

Tool Expertise: Utilize penetration testing tools and frameworks, as well as stay updated with emerging tools and techniques in the field.

Compliance and Regulations: Ensure that security assessments align with industry standards, regulations, and compliance requirements.

Security Awareness: Promote a culture of security awareness and best practices within the organization.

Research and Development: Stay current with the latest security threats, trends, and emerging technologies through continuous learning and research.

Qualifications:

Bachelor's or Master's degree in computer science, information security, or a related field.
A minimum of 4 years of experience in security penetration testing and ethical hacking.
Strong knowledge of common vulnerabilities and attack vectors, as well as relevant security standards (e.g., OWASP, CVE).
Proficiency with security assessment tools such as Burp Suite, Metasploit, Nessus, Nmap, and Wireshark.
Relevant certifications, such as Certified Ethical Hacker (CEH), Offensive Security Certified Professional (OSCP), or other security certifications.
Experience with web application, mobile application, and network security assessments.
Strong problem-solving and critical-thinking skills.
Excellent written and verbal communication skills for reporting and presenting findings.
Knowledge of compliance regulations (e.g., GDPR, HIPAA) and their implications.
Ability to work both independently and collaboratively within a team.
Strong ethical and professional conduct.