Penetration Tester

About This Role

Planning and executing penetration tests across various platforms is the core of this role, which aims to strengthen the company's cybersecurity posture. This position suits an experienced penetration tester who can conduct manual and automated testing, red team engagements, and offensive security assessments across the enterprise.

Responsibilities

• Plan and execute pen tests across web apps, APIs, mobile, networks, and cloud (AWS/Azure/GCP)
• Manually validate vulnerabilities and uncover logic flaws that scanners miss
• Run red team engagements simulating APT tactics, techniques, and procedures
• Build automated scanning pipelines and AI-agent-driven testing workflows for recon, fuzzing, and reporting
• Use threat intelligence to prioritize attack paths and vulnerable assets
• Translate findings into clear business risk and practical remediation for technical teams and leadership

Requirements

• 3+ years of hands-on penetration testing or red teaming in a corporate environment
• Proficiency with Burp Suite, Metasploit, Nmap, Wireshark, Cobalt Strike, BloodHound, and Kali tools
• Scripting skills in Python, Go, or PowerShell
• Strong knowledge of Windows, Linux, core network protocols (HTTP, DNS, SMB), and cloud/container platforms
• Practical experience integrating AI/LLM agents into security testing workflows
• Excellent written and verbal communication, from engineers to executives

Nice to have:

• Certifications: OSCP, OSCE, OSWE, GPEN, GXPN, CEH, or CISSP
• Bachelor’s degree in IT, Computer Science, or equivalent