Penetration Tester

About the role

RSM is seeking a Penetration Tester to join its security team. In this role you will deliberately probe and exploit existing computer systems, applications and networks to uncover vulnerabilities and help strengthen the firm’s security posture.

Key responsibilities

• Perform penetration tests on web applications, APIs and network devices.
• Create test cases and log defects using Azure DevOps.
• Provide clear security recommendations based on industry best practices.
• Research and experiment with emerging attack techniques.
• Automate repetitive testing procedures to improve efficiency.
• Contribute to technical and executive security reports.
• Collaborate closely with development teams to remediate findings.
• Other duties as assigned.

Required profile

• 3‑5+ years of experience in cybersecurity engineering or penetration testing.
• Bachelor’s degree or equivalent practical experience.
• Strong communication and collaboration skills, able to interact with technical and non‑technical audiences.
• Ability to meet project deadlines and work effectively with security leads and managers.

Required skills

• Experience with Dynamic Application Security Testing (DAST) tools.
• Proficiency with Burp Suite.
• Knowledge of OWASP Top 10 and SANS Top 25 vulnerabilities.
• Ability to read and audit source code during testing.
• Programming/scripting in C#, Java, Python and PowerShell.
• Use of Azure DevOps for defect tracking and reporting.
• Network vulnerability testing and exploitation techniques.

What we offer

• Competitive benefits and compensation package.
• Flexible schedule to balance personal and professional commitments.
• Inclusive culture that supports growth and development.
• Opportunities to work on diverse client engagements worldwide.