Penetration Tester

About this Position:

Job Title: Penetration Tester

Key Responsibilities:

• Conduct penetration testing on networks, web applications, APIs, mobile apps, and cloud environments.

• Perform vulnerability assessments and security audits to identify weaknesses.

• Simulate real-world cyberattacks including phishing, social engineering, and privilege escalation.

• Analyze security systems and identify potential security breaches or exploitable vulnerabilities.

• Prepare detailed penetration testing reports, including findings, risk ratings, and remediation recommendations.

• Collaborate with developers, security teams, and IT administrators to fix identified vulnerabilities.

• Use tools to perform network scanning, exploitation, and post-exploitation activities.

• Conduct red team exercises and support incident response activities.

• Stay updated with the latest cybersecurity threats, vulnerabilities, and attack techniques.

Required Skills

Technical Skills

• Strong knowledge of network security, operating systems, and web technologies

• Experience with penetration testing tools such as Burp Suite, Metasploit, Nmap, Nessus, Wireshark, Kali Linux

• Understanding of OWASP Top 10 vulnerabilities

• Knowledge of TCP/IP, DNS, HTTP/HTTPS protocols

• Experience with scripting languages (Python, Bash, PowerShell)

• Familiarity with cloud security (AWS, Azure, or Google Cloud Platform)

Security Skills

• Web application testing

• Network penetration testing

• Social engineering testing

• Exploit development (optional but preferred)

• Security risk assessment

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field

• Relevant certifications preferred:

  • CEH (Certified Ethical Hacker)

  • OSCP (Offensive Security Certified Professional)

  • GPEN (GIAC Penetration Tester)

  • CISSP (optional for senior roles)

Experience

• Junior: 1 3 years in cybersecurity or penetration testing

• Mid-Level: 3 5 years penetration testing experience

• Senior: 5+ years with experience leading security assessments

Soft Skills

• Strong analytical and problem-solving skills

• Ability to document technical findings clearly

• Good communication skills for reporting vulnerabilities

• Ability to think like an attacker to anticipate threats