Description

You will execute security assessments across applications, networks, and cloud environments to identify and mitigate vulnerabilities.

Responsibilities

• Conduct penetration testing on web, mobile, API, network, and cloud environments.
• Simulate cyberattacks through Red Team and Blue Team exercises to assess risk.
• Identify and document vulnerabilities using manual testing and automated tools.
• Provide detailed reports on findings, risks, and specific remediation steps.
• Collaborate with developers and DevSecOps teams to resolve security issues and validate fixes.
• Perform social engineering assessments including phishing and pretexting.
• Support compliance initiatives such as PCI DSS, ISO 27001, and SOC 2.

Required Skills

• 5+ years of hands-on experience in penetration testing or ethical hacking.
• Deep knowledge of OWASP Top 10, MITRE ATT&CK, NIST, and common CVEs.
• Proficiency with Burp Suite, Metasploit, Nmap, Wireshark, Kali Linux, and Nessus.
• Experience with Python, Bash, or PowerShell scripting.
• Hands-on experience with Windows, Linux, and cloud environments (AWS, Azure, GCP).
• Ability to communicate technical findings to both technical and non-technical audiences.
• Bachelor's degree in Computer Science, Information Security, or equivalent experience.

Preferred Skills

• Certifications such as OSCP, CEH, GPEN, or CRT.
• Experience with secure code review, static/dynamic analysis, and secure SDLC.
• Knowledge of adversary emulation and DevSecOps principles.

Key Skills

Education

Any Graduate