Penetration Tester

Overview

We are looking for a skilled Penetration Tester to discover, assess, and exploit security vulnerabilities across diverse systems including networks, applications, and cloud platforms through ethical hacking practices. Your role will be crucial in enhancing the organization's security measures by providing insightful risk evaluations and actionable recommendations.

Mandatory Qualifications and Skills

• Diploma or degree in Cybersecurity, Computer Science, or Information Technology.
• Minimum of 3 years practical experience in penetration testing.
• Proven expertise in testing web applications and APIs for vulnerabilities.
• Solid knowledge of network security concepts and protocols such as TCP/IP, HTTP/HTTPS, and DNS.
• Deep understanding of the OWASP Top 10 security risks and prevalent web application vulnerabilities.
• Experience working with both Linux and Windows operating systems.
• Familiarity with Active Directory concepts including privilege escalation and lateral movement techniques.
• Programming or scripting experience using Python, PowerShell, or Bash.
• Competence in using penetration testing tools including Burp Suite, Nmap, Metasploit, Kali Linux, Wireshark, BloodHound, Impacket, and Nessus.
• Excellent analytical thinking, problem-solving capabilities, and ability to produce comprehensive reports.

Preferred Skills

• Background in cloud penetration testing on AWS, Azure, or Google Cloud Platform.
• Relevant industry certifications such as OSCP, OSWE, OSEP, CREST, GPEN, or CEH.

Key Responsibilities

• Conduct penetration testing on web applications, APIs, networks, infrastructure, and cloud environments.
• Assess vulnerabilities and validate them through controlled exploitation methods.
• Identify security weaknesses including common flaws like authentication, authorization errors, injections, misconfigurations, and privilege escalation opportunities.
• Perform both internal and external network penetration tests and evaluate network security protocols.
• Carry out Active Directory security assessments involving privilege escalation, credential attacks, and lateral movement.
• Test security of RESTful APIs, mobile applications, and cloud systems as applicable.
• Develop or customize scripts, payloads, and tools to enhance penetration testing efforts.
• Analyze findings to understand business impact and risk levels associated with identified vulnerabilities.
• Prepare detailed technical reports documenting findings, evidence, risk prioritization, and suggested remediation steps.
• Collaborate with security and technology teams to verify fixes and perform re-testing where necessary.
• Stay current with emerging threats, exploitation methods, attack tactics, and industry security trends.

Additional Information

Interested applicants should submit an updated resume at the earliest convenience. Applicants provide consent for their personal data to be collected, disclosed, and used for recruitment according to the company's privacy policy. Confidentiality is guaranteed and only shortlisted candidates will be contacted.

Employment Agent Licence Number: 07C5639