Penetration Testing Engineer

Key Responsibilities

• Conduct thorough security assessments of systems, networks, and applications to identify vulnerabilities and weaknesses.
• Perform simulated cyber-attacks to exploit identified vulnerabilities, assess the security controls' effectiveness, and provide detailed reports on findings.
• Work closely with customers to understand their specific security requirements, discuss findings, and provide guidance on remediation strategies.
• Develop test tools and strategies for cybersecurity testing.
• Utilize various penetration testing tools and frameworks to automate tasks and streamline the testing process.
• Perform system security analysis on systems and/or software to understand and identify vulnerabilities.
• Execute hands-on testing which include significant technical skills with multiple operating systems (Windows, Linux, Unix, IOS (network)) as well as software/databases (SQL Server, Oracle).
• Provide technical guidance and expertise to test teams.
• Document and communicate test results effectively to technical and non-technical user groups in written and oral formats.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or a related field.
• 3+ years of proven experience in penetration testing roles.
• In-depth knowledge of common security frameworks, attack vectors, and mitigation strategies.
• Proficiency in using penetration testing tools.
• Certifications such as Certified Ethical Hacker (CEH), Offensive Security Certified Professional (OSCP), or similar are required.
• Certifications such as CISSP, and CSSP are highly desired.
• Strong ethical hacking and penetration testing skills.
• Ability to identify and exploit web application vulnerabilities.
• Analytical mindset with problem-solving abilities.
• Excellent communication skills for conveying complex technical issues to both technical and non-technical stakeholders.
• Ability to work independently and collaboratively within a team.