About the role :

We have an opportunity for an experienced and dedicated Penetration Tester to join our cybersecurity team. Key responsibilities include identifying vulnerabilities, performing security testing on systems, and developing technical recommendations to improve the company's information security defences. If you are an experienced Web Application Penetration Tester, Red Team Operator, or Cybersecurity Professional, then this position is a great fit for your background and skill set.

Key Responsibilities :

Perform penetration testing, ethical hacking, and comprehensive security assessments on web applications, network infrastructures, cloud platforms (AWS, Azure, GCP), and enterprise IT environments.
Detect and exploit vulnerabilities such as SQL Injection (SQLi), Cross-Site Scripting (XSS), Server-Side Request Forgery (SSRF), Remote Code Execution (RCE), and Insecure Direct Object References (IDOR).
Conduct network security evaluations, including port scanning, vulnerability analysis, privilege escalation, and Active Directory (AD) security testing.
Utilize a wide range of cybersecurity tools—such as Burp Suite, Metasploit, Nmap, Wireshark, Nessus, Acunetix, Kali Linux, and BloodHound—for thorough security investigations.
Develop and deploy custom scripts, automation tools, and exploits tailored to specific penetration testing scenarios.
Execute post-exploitation techniques, including privilege escalation and persistence strategies.
Prepare detailed security reports, conduct risk assessments, and propose remediation and mitigation plans to strengthen the organization's security posture.
Stay updated on zero-day vulnerabilities, exploit development, cloud security threats, and emerging cyberattack techniques.

Qualifications & Skills :

Practical experience in conducting penetration tests, assessing web application security, identifying vulnerabilities, and executing red team operations.
Solid grasp of ethical hacking frameworks and standards, including OSSTMM, OWASP Top 10, PTES, NIST guidelines, MITRE ATT&CK, and CIS Benchmarks.
Skilled in evaluating the security of web applications, cloud platforms (AWS, Azure, GCP), and APIs.
Background in network security assessments, bypassing firewalls, social engineering tactics, and wireless network security testing.
Exposure to reverse engineering, malware analysis, exploit creation, and buffer overflow exploitation is an added advantage.
Strong familiarity with Active Directory exploitation techniques such as Kerberoasting, Pass-the-Hash, usage of tools like Mimikatz, BloodHound, and PowerShell Empire.
Competent in scripting and programming (Python, Bash, PowerShell, JavaScript, or C) for security automation tasks and exploit development.
Holding or pursuing certifications such as OSCP, OSCE, OSEP, CRTP, CEH, GPEN, CISSP, eWPTX, or GXPN is highly valued.

#CyberSecurity #PenetrationTesting #EthicalHacking #InfoSec #RedTeam #BugBounty #CyberSec #Hacking #SecurityTesting #CyberSecurityCareers #EthicalHackingCareer #InfoSecJobs #RedTeamCareer #PentesterLife #OSCPJourney #CTFLearning