Penetration Tester

• Offensive Security Assessments: Plan and execute comprehensive penetration tests across web applications, external/internal networks, cloud environments, and operating systems.
• Vulnerability Exploitation: Safely identify, validate, and exploit technical security flaws, logical weaknesses, and misconfigurations to measure real-world business risk.
• Red Teaming & Adversary Emulation: Simulate modern adversary tactics, techniques, and procedures (TTPs) to evaluate defensive controls and incident response detection capabilities.
• Tooling & Automation: Utilize standard penetration testing frameworks while developing custom scripts and tools to streamline assessment workflows and target specific systems.
• Technical Reporting & Remediation: Author detailed assessment reports detailing attack chains, proof-of-concept exploits, and prioritized technical remediation guidance for engineering teams.
• Stakeholder Collaboration: Partner with developers, system administrators, and security leads to debrief assessment findings and validate implemented patches through re-testing.

• Education: Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Information Security, or a related field.
• Experience: 5+ years of hands-on experience conducting, supporting, or leading full-scope penetration tests.
• Core Technical Skills: o Deep understanding of operating system internals (Windows, Linux) and network protocols (TCP/IP, HTTP/S, DNS, SMB). o Hands-on proficiency with offensive testing frameworks (e.g., Burp Suite, Metasploit, Nmap, Cobalt Strike). o Strong web application testing techniques (e.g., OWASP Top 10 exploitation). o Scripting capability in Python, PowerShell, Bash, or Go for custom exploit payload delivery and automation.

Preferred Certifications:

• Offensive Security: OSCP (Offensive Security Certified Professional), CEH (Certified Ethical Hacker), GPEN (GIAC Penetration Tester), or GWAPT (GIAC Web Application Penetration Tester).