Penetration Tester

• Conduct authorized penetration testing across Web applications, APIs, network infrastructure, eternal and internal environments, cloud environments, and other applicable technology assets
• Perform reconnaissance, vulnerability discovery, exploitation, and post-exploitation activities within approved testing scopes.
• Identify vulnerabilities including authentication/authorization issues, injection, misconfiguration, access control weaknesses, insecure APIs, and other security flaws.
• Validate vulnerabilities through controlled proof-of-concept exploitation.
• Perform manual and automated security testing of web applications and APIs.
• Assess common application security vulnerabilities based on OWASP methodologies.
• Conduct testing beyond automated vulnerability scanning, including business logic and access-control testing.
• Review application behavior and identify potential attack paths.
• Analyze and prioritize findings based on technical severity, exploitability, and potential business impact.
• Prepare comprehensive penetration testing reports covering executive summary, technical findings, evidence / proof of concept, risk rating, business impact, remediation recommendations
• Present technical findings to technical and non-technical stakeholders where required.
• Work with engineering and client teams to understand identified vulnerabilities.
• Perform remediation validation and retesting.
• Confirm whether vulnerabilities have been adequately addressed.
• Stay updated on emerging vulnerabilities, exploits, attack techniques, and offensive security tools.
• Continuously improve penetration testing methodologies and toolsets.
• Contribute to internal knowledge sharing, playbooks, and testing methodologies.
• Participate in client discussions to understand testing objectives, scope, and technical environments.
• Ensure penetration testing activities are delivered according to agreed scope, methodology, timeline, and reporting requirements.
• Maintain proper documentation of testing activities and evidence.

Requirements

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Information Systems, or a related field.
• Min. 2–4 years of hands-on experience in penetration testing, offensive security, vulnerability assessment, or a closely related cybersecurity role.
• Demonstrable experience conducting penetration tests in a professional or client-facing environment.
• Strong understanding of networking, operating systems, web technologies, authentication mechanisms, and common security vulnerabilities.
• Strong understanding of penetration testing methodologies and vulnerability assessment.
• Hands-on experience with web application penetration testing, API security testing, network penetration testing, vulnerability assessment, exploitation and proof-of-concept development