Senior Penetration Tester

Responsibilities

• Lead end-to-end security assessment engagements for embedded products, IoT Medical & Industrial devices, Web/Mobile applications, and Cloud infrastructures.
• Perform comprehensive security evaluations, including vulnerability discovery, exploitation, code review, fuzzing, binary analysis, and validation of implemented security controls across all target environments.
• Interpret and apply cybersecurity compliance standards like EN18031, CRA, UK PSTI, UL Standards to diverse product types, translating requirements into effective test plans.
• Collaborate closely with clients to understand their security objectives, provide technical guidance, and deliver clear, professional reports with findings, risk ratings, and remediation recommendations.
• Provide high-level technical support in areas like test planning, methodology development, procedure updates, staff training, and resolution of complex quality or testing issues.
• Maintain/improve technical knowledge by attending educational workshops, reviewing professional publications, obtaining applicable certifications, and participating in professional societies and cross-departmental task forces.
• Conduct web application penetration testing (covering OWASP Top 10, API security, authentication/authorization flaws, business logic vulnerabilities, and modern web frameworks).
• Perform mobile application security assessments on iOS and Android platforms, including static analysis, dynamic analysis, reverse engineering, and platform-specific vulnerability testing.
• Execute cloud security testing and configuration reviews across AWS, Azure, GCP, or multi-cloud environments, focusing on identity and access management (IAM), network security, container/Kubernetes security, serverless architectures, storage security, and cloud misconfigurations.

Qualifications

• University Degree (Equivalent to Bachelor’s Degree) in Electronic/Computer Science/Computer Engineering/Electrical Engineering or a related discipline plus 3-5 years of related experience.
• Good skills in Cloud security testing preferred.
• Proficiency in low-level programming (C, C++, Assembly) and scripting.
• Experience with FPGA, signal processing, or hardware debugging tools is a strong plus.
• Familiar with test equipment and working in a multi-skills environment mixing electronic, optical, security, mechanical, and IT.
• Excellent written and verbal communication skills, with the ability to explain complex technical concepts to both technical and non-technical stakeholders.
• A self-motivated team player who can work independently and likes to bring new ideas for technical development.

Benefits

The estimated salary range for this position is $110,000 to $140,000 USD and is based on multiple factors, including job-related knowledge/skills, experience, geographical location, as well as other factors. This position is eligible for annual bonus compensation with a target payout of 10% of the base salary. This position also provides health benefits such as medical, dental and vision; wellness benefits such as mental and financial health; and retirement savings (401K) commensurate with the standard rewards offered in each individual location or country. We also provide full-time employees with paid time off including vacation (15 days), holiday and personal days (totaling 12 days) and sick time off (72 hours).