Penetration Tester

About the role

Conduct thorough and comprehensive penetration testing on all web and mobile applications within the organization. Identify and document potential vulnerabilities and weaknesses, provide detailed and actionable recommendations for remediation, and collaborate with cross-functional teams to prioritize and implement remediation efforts.

Stay current on the latest application security threats and mitigation techniques, develop and maintain standard operating procedures and best practices for security testing, and communicate security risks to management and stakeholders clearly.

Work closely with developers to ensure secure coding practices, participate in the design and implementation of security controls, and conduct research on new security tools and technologies. Train and mentor junior team members on security best practices, monitor and analyze security logs, and continuously enhance the organization's security posture.

Responsibilities

• Monitor and detect security incidents by analyzing attack trends and correlating logs across systems to identify advanced threats.
• Enhance monitoring processes for faster detection and ensure compliance with security frameworks and regulatory standards.
• Perform root cause analysis, create incident response plans, and implement disaster recovery measures to minimize business disruption.
• Undertake forensic analysis using advanced analytics tools and implement mitigation measures to align with compliance requirements.
• Liaise with cross-functional teams, external vendors, and auditors to ensure compliance with security frameworks.
• Maintain audit documentation and implement processes that support audit readiness and continuous compliance.
• Assist in creating and delivering cybersecurity awareness sessions, including guidance on phishing and malicious emails.

Requirements

• Extensive experience in web and mobile application security testing techniques and tools such as OWASP Top 10, Burp Suite, and Kali Linux.
• Knowledge of industry regulations and compliance standards such as PCI DSS, HIPAA, and ISO 27001.
• Proven track record of identifying and exploiting vulnerabilities in complex applications, including Cross-Site Scripting (XSS), SQL Injection, and Session Hijacking.
• Strong understanding of web development languages and frameworks such as HTML, CSS, JavaScript, and AngularJS.
• Ability to effectively communicate technical findings and recommendations to non-technical stakeholders, including management and development teams.

Skills

• Penetration Testing (PT)

Qualifications

5-8 years of relevant experience.

Pay

Expected compensation ranges from $60,000 to $135,000, depending on geographical location, minimum wage obligations, skills, and relevant experience.

Benefits

• Full range of medical and dental benefits options.
• Disability insurance.
• Paid time off (inclusive of sick leave).
• Other paid and unpaid leave options.