We are seeking a highly motivated and skilled Penetration Testing Engineer to join our cybersecurity team. The ideal candidate will be responsible for conducting comprehensive penetration tests on our systems, networks, and applications to identify and mitigate security vulnerabilities. You will play a crucial role in ensuring the security and integrity of our digital assets by simulating real-world cyberattacks and providing actionable recommendations for remediation.
Responsibilities:
- Penetration Testing and Vulnerability Assessment:
- Conduct internal and external penetration tests on web applications, mobile applications, networks, and infrastructure.
- Perform vulnerability assessments and security audits to identify weaknesses and potential attack vectors.
- Utilize various penetration testing tools and techniques, including manual and automated methods.
- Simulate real-world attack scenarios to assess the effectiveness of existing security controls.
- Perform social engineering assessments, if required.
- Perform wireless network assessments.
- Reporting and Remediation:
- Document and report identified vulnerabilities with clear and concise descriptions, including severity levels and potential impact.
- Provide detailed recommendations for remediation and mitigation strategies.
- Present findings to technical and non-technical stakeholders.
- Track and verify the implementation of remediation efforts.
- Retest systems after patches are applied.
- Security Research and Development:
- Stay up-to-date with the latest security threats, vulnerabilities, and attack techniques.
- Research and evaluate new penetration testing tools and methodologies.
- Contribute to the development and improvement of internal security testing processes.
- Contribute to the creation of security best practices.
- Compliance and Standards:
- Ensure all penetration testing activities comply with relevant legal, regulatory, and ethical standards.
- Adhere to industry best practices and security frameworks (e.g., OWASP, NIST).
- Maintain confidentiality of sensitive data.
Qualifications:
- Education: Bachelor's degree in Computer Science, Information Security, or a related field (or equivalent experience).
- Experience: 3 years of experience in penetration testing or a related security role.
- Technical Skills:
- Proficiency in using penetration testing tools (e.g., Metasploit, Nmap, Burp Suite, Wireshark).
- Strong understanding of networking protocols, operating systems (Windows, Linux), and web application architectures.
- Knowledge of common web application vulnerabilities (e.g., OWASP Top 10).
- Experience with scripting languages (e.g., Python, Bash, PowerShell).
- Knowledge of cloud security (AWS, Azure, GCP).
- Knowledge of mobile application security.
- Certifications (Preferred):
- Certified Ethical Hacker (CEH)
- Offensive Security Certified Professional (OSCP)
- GIAC Penetration Tester (GPEN)
- CISSP
- Soft Skills:
- Strong analytical and problem-solving skills.
- Excellent communication and interpersonal skills.
- Ability to work independently and as part of a team.
- Strong ethical principles and a commitment to confidentiality