PEN Tester

Minimum 3+ years of experience in conducting penetration testing and vulnerability assessments. Experience testing web applications, APIs, networks, and cloud environments. Hands-on experience with industry-standard security testing tools and exploit frameworks. Experience identifying, validating, and documenting security vulnerabilities. Exposure to secure coding practices and application security concepts. Experience preparing security assessment reports and presenting findings to stakeholders. Understanding of cybersecurity threats, attack methodologies, and defense mechanisms. Relevant certifications such as CEH, OSCP, GPEN, and PNPT are preferred. Web Application Penetration Testing (OWASP Top 10) API Security Testing and Network Penetration Testing, Vulnerability Assessment & Management Cloud Security Testing (AWS/Azure/GCP) Mobile Application Security Testing (Android/iOS) Active Directory Security Assessment Security Risk Assessment and Threat Analysis Burp Suite Professional, OWASP ZAP, Metasploit Nessus, Qualys, Nmap, Wireshark Kali Linux and Security Toolsets Python, PowerShell, Bash/Shell Scripting Understanding of Security Frameworks (OWASP, PTES, NIST) Security Reporting and Remediation Recommendations Knowledge of Compliance Standards (ISO 27001, PCI-DSS, SOC2)