Penetration Tester

Role Description
We are seeking a skilled and analytical Penetration Tester to identify security vulnerabilities and evaluate the resilience of systems, networks, applications, and digital infrastructure. The ideal candidate has a strong understanding of cybersecurity principles, ethical hacking techniques, and vulnerability assessment methodologies. This role involves conducting authorized security testing, analyzing potential attack vectors, documenting findings, and recommending effective remediation measures to strengthen security defenses and protect sensitive information.
Key Responsibilities:
Conduct authorized penetration tests on web applications, networks, APIs, servers, and other IT systems.
Identify, assess, and validate security vulnerabilities, misconfigurations, and potential attack vectors.
Perform vulnerability assessments using industry-standard tools and testing methodologies.
Evaluate authentication mechanisms, access controls, network configurations, and application security.
Simulate realistic attack scenarios within approved testing scopes to assess security resilience.
Use penetration testing tools such as Burp Suite, Nmap, Metasploit, and Wireshark to support security assessments.
Prepare detailed reports outlining identified vulnerabilities, risk levels, potential impacts, and remediation recommendations.
Collaborate with development, IT, and security teams to communicate findings and support corrective actions.
Conduct follow-up testing to verify that identified vulnerabilities have been resolved effectively.
Stay updated on emerging cyber threats, exploitation techniques, security standards, and industry best practices.
Ensure all testing activities comply with authorization requirements, ethical standards, and organizational security policies.
Qualifications
Bachelor's degree or diploma in Cybersecurity, Computer Science, Information Technology, or a related field.
Strong understanding of network security, operating systems, web technologies, and common cybersecurity vulnerabilities.
Familiarity with penetration testing tools such as Burp Suite, Nmap, Metasploit, and Wireshark.
Knowledge of security frameworks and standards such as OWASP Top 10, NIST, and PTES.
Understanding of TCP/IP networking, HTTP/HTTPS, APIs, databases, and authentication protocols.
Basic scripting or programming skills in Python, Bash, PowerShell, or similar languages.
Strong analytical, critical-thinking, and problem-solving skills.
Ability to document technical findings and communicate security risks clearly to technical and non-technical stakeholders.
High standards of professionalism, confidentiality, and ethical conduct when handling sensitive information.
Ability to work independently, manage multiple assessments, and meet project deadlines.
Relevant certifications such as OSCP, CEH, CompTIA PenTest+, or equivalent cybersecurity credentials are an advantage.

Work arrangement
Yes