> Markdown version of [/jobs/ext/4014205-ethical-hacker](https://www.wearedevelopers.com/jobs/ext/4014205-ethical-hacker). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Ethical Hacker

- **Company:** Ova Technologies
- **Location:** New York, NY, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Kubernetes Security, Active Directory, Application Programming Interfaces (APIs), Amazon Web Services, Business Logic, Software System Penetration Testing, Authentication Protocols, Microsoft Azure, Bash Shell, Burp Suite, Cloud Computing, Cloud Computing Security, Cyber Security, Computer Networks, Linux, Domain Name System (DNS), Hypertext Transfer Protocols (HTTP), Virtual Private Networks (VPN), Mobile Application Software, Python (Programming Language), Kali Linux, Network Security, Nmap, Open Web Application Security, Windows PowerShell, Red Team (Cyber Security), Reverse Engineering, Web Application Security, Session Management, TCP/IP, Wireshark, Software Vulnerability Management, Web Applications, Scripting, Google Cloud, Cloud Platform System, Large Language Models, Software Security, Malware, Cyber Threat Analysis, Firewalls (Computer Science), Git, GWAPT, Information Technology, Metasploit, Nessus, Windows Security, Tools for Reporting, Devsecops, Vulnerability Analysis
- **Published:** October 29, 2026
- **Apply:** https://www.thejobnetwork.com/job/6e827d87-58a2-46b8-8250-f273633a3f29/ethical-hacker

## About the Role

* Bachelor's degree in Computer Science, Cybersecurity, Information Security, or a related field (or equivalent practical experience).
 * 2 5 years of experience in ethical hacking, penetration testing, vulnerability assessment, or security engineering.
 * Strong understanding of networking concepts, TCP/IP, DNS, HTTP/HTTPS, VPNs, and firewalls.
 * Hands-on experience with web application security testing and OWASP Top 10 vulnerabilities.
 * Proficiency with Linux-based security environments such as Kali Linux or Parrot OS.
 * Experience using penetration testing and vulnerability assessment tools.
 * Knowledge of scripting languages such as Python, Bash, or PowerShell.
 * Strong understanding of security principles, authentication mechanisms, encryption, and access controls., * Experience performing penetration tests for web applications, APIs, mobile applications, and cloud platforms.
 * Knowledge of cloud security testing for AWS, Azure, or Google Cloud environments.
 * Familiarity with Active Directory security assessments and enterprise network testing.
 * Experience with vulnerability management platforms and security reporting tools.
 * Understanding of malware analysis, exploit development, or reverse engineering concepts.
 * Experience with bug bounty programs or responsible vulnerability disclosure.
 * Knowledge of DevSecOps and application security practices.

Technical Skills

 * Kali Linux
 * Burp Suite
 * Metasploit Framework
 * Nmap
 * Wireshark
 * Nessus
 * OpenVAS
 * OWASP ZAP
 * SQLMap
 * Nikto
 * Gobuster
 * Hydra
 * Python
 * Bash
 * PowerShell
 * Git
 * Linux
 * Windows Security
 * Web Application Security
 * API Security
 * Cloud Security

Soft Skills

 * Strong analytical and investigative skills.
 * Excellent problem-solving abilities.
 * Clear technical writing and reporting skills.
 * Ability to communicate security risks to technical and non-technical stakeholders.
 * Strong attention to detail and ethical judgment.
 * Curiosity and passion for cybersecurity research and continuous learning.

Nice to Have

 * Experience with red team operations, adversary simulation, or threat emulation.
 * Knowledge of Active Directory attacks and defenses.
 * Familiarity with container and Kubernetes security testing.
 * Experience with AI security, LLM application security, or prompt injection testing.
 * Contributions to security research, vulnerability disclosures, or cybersecurity communities.
 * Professional certifications such as OSCP, CEH, PNPT, GPEN, GWAPT, CISSP, or Security .

## Description

We are seeking a skilled Ethical Hacker to identify, analyze, and help remediate security vulnerabilities across applications, networks, systems, and cloud environments. The ideal candidate will perform authorized security assessments, penetration testing, vulnerability analysis, and security research to strengthen organizational defenses. You will collaborate with security engineers, developers, infrastructure teams, and compliance professionals to improve overall cybersecurity posture., * Conduct authorized penetration testing across web applications, mobile applications, APIs, networks, cloud environments, and infrastructure.

 * Identify, exploit, validate, and document security vulnerabilities using ethical hacking methodologies.
 * Perform vulnerability assessments, security reviews, and risk analysis.
 * Execute security testing aligned with industry frameworks such as OWASP, PTES, and NIST guidelines.
 * Conduct web application security testing including authentication, authorization, injection, session management, and business logic testing.
 * Perform network security assessments, including configuration reviews and vulnerability analysis.
 * Analyze security findings and prepare detailed reports with risk ratings and remediation recommendations.
 * Collaborate with developers, system administrators, and security teams to validate fixes and improve security controls.
 * Conduct threat research and stay updated on emerging vulnerabilities, exploits, and attack techniques.
 * Support red team exercises, security audits, and incident response investigations when required.
 * Maintain documentation of testing methodologies, findings, and security improvements.