Penetration Testing Expert

About the role

We are seeking a seasoned Penetration Testing Expert to join our high‑performing cybersecurity team. In this role you will lead advanced security assessments across web applications, infrastructure, and cloud environments, helping our clients strengthen their cyber‑resilience.

Key responsibilities

• Conduct web application penetration tests focusing on authentication, authorization, input validation, and business logic flaws.
• Assess applications against industry standards such as the OWASP Top 10.
• Perform network, infrastructure, and system penetration testing to uncover misconfigurations, unpatched vulnerabilities, and credential‑related risks.
• Utilize tools like Kali Linux, Nmap, Burp Suite, Nessus, and Metasploit for both manual and automated testing.
• Produce detailed technical reports with findings, risk levels, business impact, and remediation recommendations.
• Collaborate with Security, IT, and Engineering teams to support remediation while minimizing business disruption.
• Contribute to the evolution of testing methodologies and share knowledge within the team.

Required profile

• Bachelor's or Master's degree in Computer Science, IT, Cybersecurity or a related field.
• Minimum 5 years of hands‑on penetration testing and vulnerability assessment experience.
• Relevant offensive‑security certifications (e.g., OSCP, CEH) are highly valued.

Required skills

• Proficiency with Nmap, Nessus, Burp Suite, Metasploit, Kali Linux.
• Deep understanding of TCP/IP, DNS, HTTP/HTTPS protocols.
• Manual exploitation, proof‑of‑concept development, advanced attack techniques.
• Web application, API, authentication bypass, and OWASP‑based testing.
• Experience with Windows, Linux, macOS environments.
• Scripting in Python, Bash, PowerShell, JavaScript.
• Active Directory, LDAP, privilege‑escalation techniques.
• Cloud security (AWS, Azure, GCP) and container platforms (Docker, Kubernetes).