Pen Tester

Key Responsibilities
• Conduct manual and automated penetration tests on web applications, networks, cloud environments, and endpoints.
• Identify, exploit, and document vulnerabilities, providing actionable remediation guidance.
• Perform red team exercises simulating real-world attack scenarios.
• Collaborate with security engineers, developers, and IT teams to strengthen defenses.
• Prepare detailed technical reports and executive summaries for stakeholders.
• Stay updated on the latest attack vectors, exploits, and security tools.
• Ensure compliance with industry standards (ISO 27001, NIST, PCI-DSS, etc.).

Required Skills & Experience
• Minimum 5 years of hands-on penetration testing experience.
• Strong knowledge of network protocols, operating systems, and web technologies.
• Proficiency with tools such as Burp Suite, Metasploit, Nmap, Wireshark, Kali Linux, and OWASP methodologies.
• Experience in cloud security testing (Azure, AWS, GCP).
• Ability to script or automate tasks using Python, PowerShell, or Bash.
• Excellent analytical, problem-solving, and communication skills.

Preferred Certifications
Candidates should hold one or more of the following recognized certifications:
• OSCP (Offensive Security Certified Professional)
• CEH (Certified Ethical Hacker)
• GPEN (GIAC Penetration Tester)
• CPT (Certified Penetration Tester)
• CREST Registered Penetration Tester
• CISSP (Certified Information Systems Security Professional) – optional but valued for broader security expertise

Application Requirement
Applicants must submit a portfolio or proof of work, including:
• Reports or case studies of penetration tests (with sensitive data redacted).
• Demonstrated experience in exploiting and remediating vulnerabilities.
• Evidence of using the above tools and certifications in real-world projects