About This Role
This role is for a Penetration Test Engineer with experience in network and application penetration testing. The engineer will be responsible for identifying, validating, and reporting security vulnerabilities across various IT assets.
Responsibilities
- Perform network penetration testing for internal and external networks, servers, network devices, and infrastructure
- Conduct vulnerability assessments and penetration testing of web applications, APIs, mobile applications, and network infrastructure
- Identify and validate vulnerabilities through manual and automated testing techniques
- Perform testing for common network vulnerabilities, misconfigurations, weak authentication, exposed services, and insecure protocols
- Conduct activities such as network enumeration, service discovery, vulnerability exploitation, privilege escalation, and post-exploitation analysis
- Prepare detailed penetration testing reports with risk ratings, technical findings, evidence, and remediation recommendations
- Work with development, infrastructure, and IT teams to validate remediation of identified vulnerabilities
- Stay updated on the latest vulnerabilities, attack techniques, tools, and security best practices
Requirements
- 2 to 8 years of hands-on experience in penetration testing
- Strong experience in network penetration testing of internal and external environments
- Good understanding of TCP/IP, DNS, HTTP/HTTPS, SSH, FTP, SMB, LDAP, Active Directory, and common network protocols
- Experience with network reconnaissance, enumeration, vulnerability assessment, exploitation, and privilege escalation
- Good understanding of OWASP Top 10 and web/API security testing
- Hands-on experience with tools such as Nmap, Nessus/OpenVAS, Metasploit, Burp Suite, and similar security tools
- Knowledge of Windows and Linux security
- Experience in external/internal network, wireless, cloud, or infrastructure penetration testing is an advantage
Nice to have:
- Certifications such as OSCP, CEH, eJPT, PNPT, or equivalent are preferred
- Basic scripting knowledge in Python, Bash, or PowerShell
- Knowledge of cloud platforms such as AWS, Azure, or GCP
