Advanced Penetration Tester — Web, Network & Code Audits

AppGate; Bogotá; On-site; COP 60,000,000 - 110,000,000; Full time

Job summary

AppGate is seeking a hands-on penetration tester to audit web applications, networks, and code across multiple industries. You will perform in-depth assessments and collaborate with the team on client engagements, rarely working solo. You will also contribute to in‑house Python tools to aid testing.

Excellent written and spoken English is required; OSCP or OSWE are highly preferred. AWS penetration testing experience is valued.

Qualifications

• Capable of performing in-depth penetration tests (usually 2-3 week duration).
• Strong understanding of web application and/or network vulnerabilities and mitigation controls.
• Good attention to detail and ability to complete tasks by the deadline.
• Well organized and ability to work autonomously.
• Technical curiosity and self-starter.

Responsibilities

• Perform web application audits (common), network penetration tests (common), source code analysis (common), hardware assessments (less common), mobile penetration tests (common).
• Create detailed penetration test reports in English detailing steps taken and actionable remediation suggestions.
• Develop scripts/tools to demonstrate vulnerabilities with proof or test exploit scenarios.
• Hands-on approach with minimal automation to provide deep-dive results.
• Work with team members on client assessments; rarely a solo engagement.
• Contribute to in-house Python tools to aid the penetration testing process.

Skills

Penetration testing

Web app security

Network security

Code analysis

Python scripting

AWS testing

Tools

OSCP

OSWE

Job description

AppGate is seeking a hands-on penetration tester to audit web applications, networks, and code across multiple industries. You will perform in-depth assessments and collaborate with the team on client engagements, rarely working solo. You will also contribute to in‑house Python tools to aid testing.

Excellent written and spoken English is required; OSCP or OSWE are highly preferred. AWS penetration testing experience is valued.