Penetration Tester

About the role

The Penetration Tester conducts authorized security assessments of applications, APIs, and network infrastructure to identify vulnerabilities and security weaknesses. You will work closely with development, infrastructure, and security teams, applying an attacker mindset to protect both internally developed and third‑party systems.

Key responsibilities

• Perform web application, API, and network security assessments.
• Identify, exploit, and validate security vulnerabilities in applications and infrastructure.
• Create test cases, document findings, and track remediation activities in Azure DevOps.
• Provide risk‑based security recommendations and guidance to stakeholders.
• Validate remediation efforts and conduct retesting of previously identified vulnerabilities.
• Research emerging threats, attack techniques, and industry security trends.
• Assist in developing and automating penetration testing methodologies and security processes.
• Participate in the creation of technical and executive‑level assessment reports.

Required profile

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or equivalent experience.
• 3‑5+ years of experience in penetration testing, application security, or cybersecurity engineering.
• Experience conducting application and network penetration tests in enterprise environments.
• Strong verbal and written communication skills, able to convey technical findings to both technical and non‑technical audiences.
• Preferred certifications: GPEN, CEH, Security+, CISSP.

Required skills

• Web application and network penetration testing expertise.
• Proficiency with Burp Suite Professional.
• Understanding of OWASP Top 10, SANS Top 25, and common attack methodologies.
• Ability to read, understand, and audit source code (C#, Java, JavaScript, Python).
• Scripting/automation using Python, PowerShell, Bash.
• API security testing (REST, GraphQL, SOAP).
• Experience with Azure DevOps or similar ticketing platforms.
• Linux and Windows operating systems.
• Cloud platforms: Azure, AWS, GCP.