Description

Key Responsibilities:

• Conduct comprehensive penetration testing on web applications, APIs, internal/external networks, cloud environments, and enterprise infrastructure.
• Perform vulnerability assessments and manual security testing to identify security weaknesses beyond automated scan results.
• Execute black-box, grey-box, and white-box penetration testing engagements.
• Test authentication, authorization, session management, business logic, and API security controls.
• Assess infrastructure components including Windows/Linux servers, Active Directory, databases, firewalls, VPNs, wireless networks, and network devices.
• Perform network, operating system, and web application exploitation while maintaining testing ethics and security standards.
• Validate vulnerabilities discovered through automated tools and eliminate false positives.
• Develop detailed penetration testing reports with risk ratings, proof-of-concepts, and remediation recommendations.
• Collaborate with development, infrastructure, and security teams to remediate identified vulnerabilities.
• Conduct security assessments aligned with industry standards such as OWASP Top 10, MITRE ATT&CK, NIST, and CVSS.
• Support secure SDLC initiatives by providing security recommendations during development and deployment.
• Perform retesting after remediation to validate security fixes.
• Stay updated with emerging attack techniques, vulnerabilities, exploits, and security best practices.

Key Competencies:

• Strong analytical and problem-solving skills.
• Excellent communication and technical documentation abilities.
• Ability to work independently and collaboratively in cross-functional teams.
• Strong attention to detail and commitment to security best practices

Key Skills

Education

Bachelor's degree