Penetration Tester / Vulnerability Assessment Engineer

We are seeking an experienced Penetration Tester / Vulnerability Assessment Engineer with strong hands-on expertise in offensive security testing across web applications, APIs, networks, and cloud environments. The ideal candidate will have experience identifying, exploiting, analyzing, and documenting security vulnerabilities, along with providing remediation recommendations to improve overall security posture., * Perform penetration testing and vulnerability assessments on web applications, APIs, networks, and cloud environments

• Identify, exploit, validate, and document security vulnerabilities
• Conduct security assessments using ethical hacking methodologies and industry best practices
• Analyze security weaknesses and provide detailed remediation recommendations
• Perform manual and automated security testing activities
• Execute network, application, and infrastructure security assessments
• Prepare detailed technical reports and executive summaries
• Collaborate with infrastructure, development, and security teams to resolve vulnerabilities
• Support remediation validation and retesting activities
• Stay current with emerging threats, attack vectors, and cybersecurity trends

• 4+ years of hands-on penetration testing experience
• Strong experience with vulnerability assessments and offensive security testing
• Experience testing:

• Web Applications
• APIs
• Network Infrastructure
• Cloud Environments

• Strong understanding of ethical hacking methodologies and security frameworks
• Hands-on experience with security tools such as:

• Burp Suite
• Metasploit
• Nmap
• Kali Linux
• Similar security testing tools

• Experience identifying and documenting security vulnerabilities
• Strong troubleshooting and analytical skills
• Excellent written and verbal communication skills

Preferred Skills:

• Experience with cloud security testing (AWS, Azure, Google Cloud Platform)
• Experience with application security and API security testing
• Knowledge of OWASP Top 10 and common attack vectors
• Experience performing remediation validation and security reviews
• Relevant certifications are a plus:

• OSCP
• CEH
• GPEN