Job description
About the Role
With the rising complexity of cyber threats, web application security, and ethical hacking, penetration testing has become a critical component in safeguarding businesses worldwide. We are actively seeking experienced Web Application Penetration Testers, Red Team Operators, and Cybersecurity Professionals to help strengthen security defenses and identify vulnerabilities across web applications, cloud environments, enterprise IT systems, and corporate networks.
Key Responsibilities:
- Conduct penetration testing, ethical hacking, and security assessments on web applications, networks, cloud infrastructures (AWS, Azure, GCP), and enterprise IT environments.
- Identify and exploit vulnerabilities such as SQL Injection (SQLi), Cross-Site Scripting (XSS), Server-Side Request Forgery (SSRF), Remote Code Execution (RCE), and Insecure Direct Object References (IDOR).
- Perform network security assessments, including port scanning, vulnerability analysis, privilege escalation, and Active Directory (AD) security testing.
- Utilize cybersecurity tools such as Burp Suite, Metasploit, Nmap, Wireshark, Nessus, Acunetix, Kali Linux, and BloodHound for in-depth security evaluations.
- Develop and execute custom scripts, automation tools, or exploits for penetration testing scenarios.
- Conduct post-exploitation analysis, privilege escalation, and persistence techniques.
- Provide detailed security reports, risk assessments, remediation plans, and mitigation strategies to enhance security posture.
- Stay updated on zero-day vulnerabilities, exploit development, cloud security threats, and emerging cyberattack techniques.
Skills
Qualifications & Skills:
- Hands-on experience in penetration testing, web security, vulnerability assessments, and red teaming.
- Strong understanding of ethical hacking methodologies including OSSTMM, OWASP Top 10, PTES, NIST, MITRE ATT&CK, and CIS Benchmarking.
- Proficiency in web application security testing, cloud security (AWS, Azure, GCP), and API security.
- Experience in network security, firewall evasion, social engineering, and Wi-Fi security testing.
- Knowledge of reverse engineering, malware analysis, exploit development, and buffer overflow techniques is a plus.
- Familiarity with Active Directory attacks, Kerberoasting, Pass-the-Hash, Mimikatz, BloodHound, and PowerShell Empire is highly desirable.
- Proficiency in scripting/programming (Python, Bash, PowerShell, JavaScript, or C) for security automation and exploit development.
- Relevant certifications such as OSCP, OSCE, OSEP, CRTP, CEH, GPEN, CISSP, eWPTX, or GXPN are highly preferred.
Keywords:
Penetration Testing, Web Security, Ethical Hacking, Cybersecurity Jobs, Remote Work, Red Team, Bug Bounty, Application Security, AppSec, Cloud Security, OSCP, Offensive Security, Security Testing, Blue Team, Cyber Threats, InfoSec Jobs, Security Research, SOC, Hacker Jobs, Vulnerability Research, Penetration Tester, Web Application Penetration Tester, Cyber Security
