Penetration Tester

Job Description:

Job Summary

We are looking for an experienced and highly skilled Penetration Tester with over 5 years of experience to join our cybersecurity team. The ideal candidate will have a deep understanding of network and application security, a strong background in ethical hacking, and the ability to identify and mitigate security vulnerabilities. This role is crucial to ensuring the security and integrity of our systems and applications.

Job Responsibilities

 Conduct comprehensive penetration testing of networks, web applications, mobile applications, and other systems to identify security vulnerabilities.

 Perform vulnerability assessments and provide detailed recommendations for remediation.

 Develop and execute security test plans, scenarios, and scripts to simulate real-world attacks.

 Collaborate with development and IT teams to understand security requirements and integrate security testing into the software development lifecycle.

 Prepare detailed reports of findings, including risk analysis and recommended mitigations, and present these findings to stakeholders.

 Stay current with emerging security threats, vulnerabilities, and technology trends, and apply this knowledge to improve our security posture.

 Assist in the development and implementation of security policies, standards, and procedures.

 Provide guidance and mentorship to junior security team members

Requirements

Candidate Required Skills

 Minimum of 5 years of hands-on experience in penetration testing and vulnerability assessment.

 B.E./B.Tech. in Computer Science, Information Security, or a related field. Advanced certifications such as OSCP, CEH, or CISSP are preferred.

 Proficiency in using penetration testing tools such as Metasploit, Burp Suite, Nmap, Nessus, Wireshark, and others.  Strong understanding of network protocols, network and application security architectures, and common vulnerabilities (e.g., OWASP Top Ten).  Experience with scripting languages such as Python, Ruby, Bash, or PowerShell.

 Familiarity with operating systems (Windows, Linux) and their security features.

 Excellent problem-solving skills and the ability to think critically to identify and address security issues.

 Strong verbal and written communication skills, with the ability to clearly document and present technical information to both technical and non-technical audiences.

 Demonstrated experience in ethical hacking practices and methodologies.

 High level of attention to detail and accuracy in conducting tests and reporting findings.

 Commitment to staying updated with the latest security trends, tools, and techniques