We are seeking a highly skilled and motivated Certified Penetration Testing Engineer to join our growing security team. You will play a critical role in identifying and exploiting vulnerabilities within our systems and networks, ultimately strengthening our overall security posture. As a white-hat hacker, you will combine your technical expertise with creative thinking to simulate real-world cyberattacks and propose effective mitigation strategies.
Responsibilities
· Conduct comprehensive penetration testing engagements across various systems and applications, including web applications, networks, infrastructure, and mobile apps.
· Utilize a variety of penetration testing tools and techniques, including vulnerability scanners, exploit frameworks, social engineering, and physical security assessments.
· Analyze vulnerabilities discovered during testing and assess their potential impact on the organization.
· Develop detailed and actionable reports outlining identified vulnerabilities, exploit scenarios, risk levels, and recommended remediation strategies.
· Collaborate with internal teams (development, IT, etc.) to prioritize and fix vulnerabilities efficiently.
· Stay up-to-date on the latest cybersecurity threats, vulnerabilities, and attack vectors.
· Participate in red team exercises and other security assessments as needed.
· Contribute to the continuous improvement of the company's security posture and penetration testing methodologies.
Qualifications
· Certified Penetration Testing Engineer (CPTE), Certified Ethical Hacker (CEH), Offensive Security Certified Professional (OSCP), or equivalent industry-recognized certification (strongly preferred).
· Minimum 3+ years of experience in penetration testing or a similar role.
· Proven ability to identify and exploit vulnerabilities in various systems and applications.
· Strong understanding of network security, operating systems, web application security, and cryptography.
· Excellent communication and writing skills to effectively document findings and recommendations in technical reports.
· Ability to work independently and as part of a team in a fast-paced environment.
· Problem-solving skills and the ability to think creatively and strategically.
· Passion for cybersecurity and ethical hacking.