Pentester Ético / Consultor de Seguridad Ofensiva

Placements24; Mérida; Presencial; MXN 420 000 - 660 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Competitive salary

Health insurance

Paid time off

Professional development

Equipment provided

Retirement plan

Team events

Resumo da oferta

Excellent communication and documentation skills are essential to present results to clients and internal stakeholders, while maintaining high ethical standards. Relocation not required for Mérida-based work.

Qualificações

• Bachelor's degree or equivalent practical experience in CS/cybersecurity.
• Minimum of 4 years of penetration testing or offensive security experience.
• Strong knowledge of OWASP Top 10, networks and OS concepts.

Responsabilidades

• Conduct comprehensive penetration tests on web apps, APIs, networks and mobile apps.
• Identify vulnerabilities, misconfigurations and potential exploits.
• Perform social engineering assessments and physical security tests as required.
• Develop detailed reports with findings, risk ratings and remediation steps.
• Collaborate with development and operations to remediate issues.
• Stay updated on latest testing techniques, tools, and threat intel.
• Develop custom scripts/tools to aid security assessments.
• Participate in security architecture reviews and offensive insights.
• Present findings and technical details to clients and stakeholders.
• Maintain strict confidentiality and ethical standards.

Conhecimentos

Penetration testing

Offensive security

Burp Suite

Metasploit

Nmap

Nessus

Python

Bash

PowerShell

OWASP Top 10

Report writing

Presentation skills

Independent work

Formação académica

Bachelor's degree in Computer Science, Cybersecurity, or related field

Equivalent practical experience

Ferramentas

Burp Suite

Metasploit

Nmap

Nessus

Descrição da oferta de emprego

About the Role

Our client is looking for a highly skilled and experienced Pentester Ético / Consultor de Seguridad Ofensiva to join their security assurance team in Mérida, Yucatán . In this role, you will be responsible for identifying vulnerabilities in our client's applications, networks, and systems through simulated attacks. Your findings and recommendations will be crucial in strengthening our security posture and protecting against real-world threats. The ideal candidate has a passion for cybersecurity, a keen eye for detail, and a strong understanding of attack vectors and exploitation techniques. This is an exciting opportunity to work with a diverse range of technologies and contribute directly to the security of our client's digital assets. We value creativity, analytical thinking, and the ability to clearly communicate technical findings to both technical and business stakeholders. Your work will directly impact the resilience of our client's infrastructure against sophisticated cyber adversaries. This role is based in the vibrant city of Mérida .

Key Responsibilities

• Conduct comprehensive penetration tests on web applications, APIs, networks, and mobile applications.
• Identify security vulnerabilities, misconfigurations, and potential exploits.
• Perform social engineering assessments and physical security tests as required.
• Develop detailed reports outlining findings, risk assessments, and remediation recommendations.
• Collaborate with development and operations teams to remediate identified vulnerabilities.
• Stay up-to-date with the latest penetration testing techniques, tools, and threat intelligence.
• Develop custom scripts and tools to aid in security assessments.
• Participate in security architecture reviews and provide offensive security insights.
• Present findings and technical details to clients and internal stakeholders.
• Maintain strict confidentiality and ethical standards in all engagements.

Requirements

• Bachelor's degree in Computer Science, Cybersecurity, or a related field, or equivalent practical experience.
• Minimum of 4 years of experience in penetration testing or offensive security.
• Proven experience with various penetration testing methodologies and tools (e.g., Burp Suite, Metasploit, Nmap, Nessus).
• Strong understanding of web application vulnerabilities (OWASP Top 10), network protocols, and operating systems.
• Experience with scripting languages such as Python, Bash, or PowerShell.
• Ability to analyze complex systems and identify security weaknesses.
• Excellent report writing and presentation skills.
• Strong understanding of cybersecurity principles and best practices.
• Ability to work independently and manage multiple engagements.
• Ethical mindset and a commitment to professional conduct.
• Relevant certifications such as OSCP, CEH, GPEN, or GWAPT are highly desirable.

Benefits

• Competitive salary and performance incentives.
• Comprehensive health, dental, and vision insurance.
• Generous paid time off and holidays.
• Opportunities for professional development, training, and certifications.
• A challenging and rewarding work environment in Mérida .
• Company-provided tools and equipment.
• Retirement savings plan.
• Regular team events and social gatherings.
• Exposure to a wide array of security challenges and technologies.