Penetration tester

Key Responsibilities

Perform penetration testing on web applications, APIs, mobile applications, networks, cloud environments, and infrastructure. Identify and exploit security vulnerabilities using manual testing and industry-standard tools. Conduct vulnerability assessments and validate security findings. Perform reconnaissance, enumeration, exploitation, privilege escalation, and post-exploitation activities within authorized environments. Assess vulnerabilities based on business impact and risk. Document findings with clear technical evidence, risk ratings, and remediation recommendations. Prepare detailed penetration testing reports for technical and non-technical stakeholders. Work with development, infrastructure, and security teams to validate remediation and perform retesting. Stay current with emerging vulnerabilities, attack techniques, security tools, and industry standards. Follow established penetration testing methodologies and security best practices.

Required Skills & Qualifications

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent practical experience. Strong understanding of networking, TCP/IP, Linux, Windows, and common security technologies. Hands-on knowledge of web application and API security, including OWASP Top 10. Experience with penetration testing tools such as Burp Suite, Nmap, Metasploit, Wireshark, and Kali Linux. Understanding of authentication, authorization, session management, encryption, and common application vulnerabilities. Basic scripting/programming skills in Python, Bash, Power Shell, or similar languages. Strong analytical, problem-solving, and documentation skills. Ability to communicate technical security findings clearly.