Description

You will conduct comprehensive penetration testing on web applications, APIs, internal/external networks, cloud environments, and enterprise infrastructure.

This role is on-site.

Responsibilities

• Perform black-box, grey-box, and white-box penetration testing, including manual security testing to identify weaknesses beyond automated scans.
• Test authentication, authorization, session management, business logic, and API security controls.
• Assess infrastructure components such as Windows/Linux servers, Active Directory, databases, firewalls, VPNs, and wireless networks.
• Validate vulnerabilities, eliminate false positives, and develop detailed reports with risk ratings, proof-of-concepts, and remediation recommendations.
• Support secure SDLC initiatives and conduct retesting to validate security fixes.

Required Skills

• 10+ years of experience in penetration testing and vulnerability assessments.
• Hands-on expertise with Web and API security testing.
• Proficiency in testing Windows and Linux servers, Active Directory, and databases.
• Experience with wireless networks and enterprise infrastructure security.
• Strong understanding of OWASP Top 10, MITRE ATT&CK, NIST, and CVSS standards.
• Ability to conduct secure SDLC assessments and provide technical recommendations.
• Bachelor's degree in a relevant field.

Preferred Skills

• Experience with cloud environment security testing.
• Strong analytical and problem-solving skills with excellent technical documentation abilities.

Key Skills

Education

Bachelor's degree