Penetration Tester / Scrum Master

Role Description

The Penetration Tester / Scrum Master combines cybersecurity assessment responsibilities with agile project coordination to help maintain secure systems and support effective software development. This role involves identifying potential security vulnerabilities, evaluating system defenses, coordinating remediation activities, and facilitating collaboration among cross-functional teams to ensure that technical projects progress efficiently and meet established objectives.

Key responsibilities include conducting authorized penetration tests, assessing applications, networks, and system configurations, and identifying weaknesses that could expose organizational assets to security threats. The role involves using appropriate security testing tools and methodologies, analyzing test results, documenting findings, and preparing detailed reports with practical remediation recommendations. The Penetration Tester will collaborate with development and security teams to validate corrective actions, improve security controls, and support secure development practices.

As Scrum Master, the role facilitates agile ceremonies, including sprint planning, daily stand-ups, sprint reviews, and retrospectives. Responsibilities include removing obstacles, monitoring sprint progress, supporting backlog refinement, promoting effective communication, and helping team members maintain alignment with project priorities. The Scrum Master will encourage continuous improvement, strengthen team collaboration, and ensure that agile principles are applied consistently throughout the development lifecycle.

Additional duties include coordinating security-related tasks within sprint schedules, communicating project risks, maintaining relevant documentation, and supporting the timely delivery of technical initiatives. The successful candidate will balance security assessment activities with agile facilitation while promoting accountability, transparency, and continuous improvement.

Qualifications

• Strong understanding of cybersecurity principles, penetration testing methodologies, and vulnerability assessment techniques.
• Familiarity with network security, web application security, authentication mechanisms, and common security vulnerabilities.
• Knowledge of security testing tools and frameworks such as Burp Suite, Nmap, OWASP Testing Guide, or equivalent technologies.
• Ability to document security findings, assess risks, and recommend effective remediation measures.
• Understanding of Agile methodologies, Scrum principles, and iterative software development processes.
• Familiarity with sprint planning, daily stand-ups, retrospectives, and backlog management.
• Strong facilitation, communication, organizational, and problem-solving skills.
• Ability to identify project impediments, coordinate resolution efforts, and encourage team collaboration.
• Proficiency in project tracking and collaboration tools such as Jira, Confluence, or equivalent platforms.
• Strong analytical thinking, attention to detail, and commitment to continuous improvement.
• Ability to manage competing priorities while maintaining security standards and project objectives.
• Commitment to ethical conduct, authorized security testing, confidentiality, and professional integrity.