Senior Penetration Tester / Penetration Tester

About This Role

This role is for a security professional passionate about securing digital landscapes and with expertise in offensive security testing. You will conduct technical security assessments and penetration testing across various domains.

Responsibilities

• Conduct technical security assessments and offensive security testing, including penetration testing across network infrastructure, web applications, and mobile applications
• Identify, validate, and exploit security vulnerabilities to assess real-world impact and risk
• Analyze security testing results and provide clear, actionable remediation guidance to technical stakeholders
• Communicate findings effectively to both technical and non-technical audiences, ensuring risks are understood and prioritized
• Support stakeholders throughout remediation
• Establish and maintain security testing metrics to improve operational visibility and deliver higher value reporting

Requirements

• 2+ years of relevant experience in offensive security, penetration testing, or security assessment
• Strong passion for cybersecurity and willingness to continuously learn new techniques and technologies
• Solid understanding of networking fundamentals (TCP/IP, DNS, routing, VPN, etc.)
• Solid understanding of operating systems (Windows/Linux)
• Solid understanding of web application security (OWASP Top 10)
• Solid understanding of mobile security fundamentals (Android/iOS)
• Programming and scripting knowledge (e.g., Python, Bash, PowerShell, JavaScript, etc.)
• Hands-on experience with common security tools
• Strong report writing skills in English and Thai (technical + executive-friendly writing)
• Good communication and stakeholder management skills
• Bachelor’s or Master’s degree in Computer Science, Computer Engineering, IT, or related fields

Nice to have:

• Experience in CTFs, cyber competitions, Hack The Box, TryHackMe, or similar platforms
• OSCP, GPEN, or equivalent offensive security certifications (e.g., CRTO, PNPT, eJPT, etc.)

About the Company

ALPHASEC is a professional firm specializing in consulting, auditing, outsourced services, platform, monitoring, and training in the areas of cybersecurity, data protection, data management, and digital innovation. It helps clients comply with applicable laws and regulations and obtain standardized certifications.