About This Role
This role involves identifying security vulnerabilities, assessing risks, and providing actionable recommendations to improve the security posture of clients' IT infrastructure and applications. The successful candidate will join a cybersecurity team focused on ethical hacking practices.
Responsibilities
- Conduct penetration testing and vulnerability assessments on web and mobile applications, APIs, and IT infrastructure
- Perform security testing using both automated tools and manual testing techniques
- Perform vulnerability analysis, exploitation, and post-exploitation activities within an authorized testing scope
- Prepare comprehensive penetration testing reports, including findings, evidence, risk ratings, and remediation recommendations
- Collaborate with internal security teams and clients to communicate technical findings and recommend appropriate mitigation strategies
- Ensure all security testing activities comply with agreed scopes, rules of engagement, and applicable security standards
Requirements
- Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field, or equivalent practical experience
- Good understanding of networking concepts, TCP/IP, DNS, HTTP/HTTPS, routing, and common network services
- Hands-on experience with penetration testing tools such as Burp Suite, Nmap, Metasploit, and vulnerability scanners
- Knowledge of common security vulnerabilities, exploitation techniques, authentication mechanisms, and access control weaknesses
- Ability to analyze technical findings, assess risk, and provide practical remediation recommendations
- Strong analytical, problem-solving, documentation, and communication skills
- Able to work independently and collaboratively within a team
- Professional integrity and a strong commitment to ethical hacking practices
Nice to have:
- Relevant certifications such as eJPT, PNPT, OSCP, CEH, or equivalent certifications
- Experience working in a cybersecurity service provider, consulting firm, or Managed Security Service Provider (MSSP)
Benefits
- Opportunities to work on real-world cybersecurity engagements across different environments
- Exposure to diverse IT infrastructure, applications, and security technologies
- Opportunities for professional development and cybersecurity certification
- A collaborative environment focused on continuous learning and technical growth
Application Process
- Complete the pre-qualification questionnaire as part of the recruitment process, ensuring all answers are accurate and reflect your actual skills, experience, and technical knowledge
