Senior Penetration Tester

Join our team as a Senior Penetration Tester, where you will assess and report on the security posture of our clients' applications, infrastructure, APIs, servers, and endpoints. This hybrid role involves conducting comprehensive penetration tests, evaluating system architectures, collaborating with clients, and preparing detailed reports. You will also stay updated on the latest security threats and provide expert support during security incident response activities.

• Conduct comprehensive penetration tests on clients' systems across various platforms to identify security vulnerabilities.
• Utilise, develop and execute customized test plans, methodologies, and tools for penetration testing, focusing on both network and application layers.
• Prepare detailed and comprehensive reports documenting identified vulnerabilities, their potential impact, and actionable remediation strategies.
• Your deep knowledge of app security, penetration testing methodologies, and industry best practices will be instrumental in ensuring the confidentiality, integrity, and availability of our client’s systems
• Strong understanding of programming and scripting (e.g., Python, Bash) to automate testing processes and develop custom scripts tailored to client’s specific needs is a plus
• Excellent written and verbal communication skills, with the ability to convey technical concepts in a clear and concise manner to both technical and non-technical clients
• Demonstrated ability to work independently and collaboratively within a team, effectively managing multiple testing engagements, meeting deadlines, and delivering high-quality results
• Degree in Computer Science, Information Security, or experience in a related field
• Hands-on experience performing mobile application penetration testing across Android and iOS platforms is highly desirable, including analysis of mobile app architectures, secure storage, authentication mechanisms, and inter-app communication
• Solid understanding of application frameworks and architectures, operating systems (Windows, Unix), and underlying technologies
• Relevant industry certifications (e.g., OSCP, PNPT, CREST CPSA,CRT accredited certs, SANS) and/or experience in mobile applications, thick client applications, Citrix and Secure Code Review are highly desirable
• Proficiency in using cutting-edge penetration testing tools and frameworks (e.g., Burp Suite Professional, Nmap, Nessus, Metasploit, SoapUI/Postman/ReadyAPI)
• Proven track record as a Penetration Tester, with significant experience in web and mobile application, infrastructure and API security testing. A minimum of 5 years of experience in professional penetration testing is required
• Extensive expertise in security vulnerabilities, threats, and attack vectors, coupled with a thorough understanding of industry best practices and standards (e.g., OWASP, NIST, PTES)