Penetration Tester
Core
Conduct authorized penetration testing across web applications, APIs, network infrastructure, and cloud environments to identify and validate security vulnerabilities.
Role type
Senior IC penetration tester (offensive security)
Builds
Security assessments and remediation validation for client and internal technology assets
Domain
Cybersecurity / Offensive Security
Required skills
Penetration testing methodologies, vulnerability assessment, web application security, API security, network security, exploitation, proof-of-concept development, manual security testing, risk analysis, remediation validation
Preferred skills
Business logic testing, access-control testing, emerging exploit techniques, knowledge sharing, playbook development
Technologies
Burp Suite, Nmap, Metasploit, SQLMap, Wireshark, Gobuster, ffuf, Linux, Windows, TCP/IP, DNS, HTTP/HTTPS, VPN, firewalls
Responsibilities
Conduct reconnaissance, vulnerability discovery, and exploitation within approved scopes; Identify and prioritize security flaws including authentication issues, injection, and misconfigurations; Validate findings through controlled proof-of-concept exploitation; Prepare comprehensive reports with executive summaries and remediation recommendations; Present findings to technical and non-technical stakeholders; Collaborate with engineering and client teams to understand vulnerabilities and validate remediation efforts; Maintain documentation of testing activities and evidence.
Seniority
Mid-Senior, hands-on IC