Penetration Tester

About This Role

This role is for an experienced Penetration Tester who will conduct penetration tests and technical vulnerability assessments on applications, networks, and systems. The position involves identifying, validating, and prioritizing technical vulnerabilities and collaborating with defensive teams for remediation.

Responsibilities

• Execute penetration tests on web applications, internal networks, and wireless environments
• Identify, validate, and prioritize technical vulnerabilities
• Prepare technical and executive reports with evidence and recommendations
• Collaborate with defensive teams to explain findings and support remediation
• Stay updated on exploitation techniques and new vulnerabilities

Requirements

• Experience with Burp Suite, Metasploit, and exploitation tools
• Knowledge of web, network, and system vulnerabilities
• Ability to prepare technical and executive reporting
• Scripting with Python, PowerShell, or Bash
• High level of technical English
• Proactive attitude and orientation towards continuous improvement
• Ability to work collaboratively in multidisciplinary teams
• Good communication skills with technical and non-technical profiles
• Autonomy, responsibility, and results orientation
• Capacity for learning and adapting to new environments and technologies

Nice to have:

• OSCP certification highly valued, in addition to CEH, GPEN, or GWAPT
• Experience in defensive cybersecurity or defense environments
• Knowledge of post-exploitation and hardening

About the Company

At GFT, diversity is considered one of the fundamental pillars, promoting an inclusive work environment based on cooperation and mutual respect. GFT offers equal opportunities to all people regardless of race, cultural origin, sex, age, sexual orientation, gender identity, disability, or religious beliefs.