Penetration Tester

Key Responsibilities:

• Plans, executes and manages complex penetration testing engagements on various IT assets, including networks, applications and databases.
• Conducts simulated cyber-attacks, including social engineering, to identify vulnerabilities and assesses the organization's resilience to cyber threats.
• Performs penetration tests against internal and external facing systems.
• Analyses and interprets penetration test results and provides detailed reports to relevant stakeholders.
• Provides input to improve the quality and effectiveness of tests in a highly scaled and global environment.
• Articulates complex technical risks through creation of reports and delivering presentations to key stakeholders.
• Works with Security DevOps teams to test the orchestration and automation processes and platforms, feed results into a testing program.
• Supports the assessment risk and the development and/or recommends appropriate mitigation countermeasures based on empirical testing.
• Provides comprehensive technical expertise with web, application and database vulnerability testing.
• Supports the development of the security automation framework and the implementation roadmap.
• Provides actionable security recommendations and mitigation strategies to address identified vulnerabilities.
• Ensures that penetration testing activities align with relevant industry standards, compliance regulations, and best practices.
• Contributes to any security awareness training and education programs to promote a culture of cybersecurity within the organization.
• Stays up to date with the latest cybersecurity threats, attack vectors, and defensive technologies to continuously improve testing methodologies.

Knowledge and Attributes:

• Ability to work independently and manage multiple projects within remote environment.
• Demonstrates a strong ability to engage with various stakeholders, have a team-based approach and work towards share goals and outcomes.
• Ability to think outside the box and a passion to improve your skills and drive innovation.
• Ability to compromise systems and demonstrate ways to laterally move post compromise.
• In-depth knowledge of common security assessment methodologies, such as OWASP, PTES, or NIST SP 800-115.
• Strong understanding of various operating systems, network protocols, and application security.
• Proficiency in using penetration testing tools and frameworks, such as Metasploit, Burp Suite, Nmap, and Wireshark.
• Knowledge of security assessment tools and technologies used to evaluate web applications, databases, and network infrastructure.
• Excellent analytical and problem-solving skills to identify and exploit vulnerabilities effectively.
• Strong written and verbal communication skills to deliver clear and concise reports and recommendations to stakeholders.
• Ethical and professional conduct with a commitment to confidentiality and data privacy.

Academic Qualifications and Certifications:

• Bachelor's degree or equivalent in Information Technology or Computer Science or related field.
• Security related certifications such as OSWE, OSEP, OSCP, OSCE, CRTP, GPEN, or CREST is desirable.

Required Experience:

• Seasoned demonstrated penetration testing experience and ethical hacking gained within a similar global environment.
• Seasoned demonstrated experience with both commercial and open-source security tools and scripting languages.
• Seasoned demonstrated exposure to security testing scenarios e.g. Capture the Flag / Red Team / Blue Team is desirable.
• Seasoned demonstrated experience with various testing platforms e.g. Hack the Box / Vulnhub / PentesterLab is desirable.