Senior Penetration Tester - Web & API Security Expert

phew Limited; New Zealand; Híbrido; NZD 110 000 - 190 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Growth opportunities

Collaborative team

Hands-on variety of targets

Security training and certifications

Study leave and course costs

WFH flexibility

Auckland central office access

Resumo da oferta

phew Limited, Auckland, NZ, is seeking an experienced Senior Penetration Tester to join a quality-focused cyber security team. You will conduct deep penetration tests across web, mobile, and API targets for diverse clients, and guide security improvements from discovery to remediation.

You will mentor juniors, engage with clients, and contribute to testing frameworks, tooling, and methodologies. Sponsorship for suitable candidates planning a move to NZ is available; hybrid work with office in

Qualificações

• 3-5+ years of full-time penetration testing experience focusing on web, mobile apps and APIs.
• Strong programming knowledge and hands-on source code review experience.
• Proven security research or bug bounty track record with CVE credits or recognised competitions.
• Ability to self-manage and deliver clear, high-quality reports.
• Strong English and clear communication of security concepts.
• Experience with OWASP, NIST, Burp Suite and Kali Linux.
• OSCP and/or OSWE / OSEP / OSCE or equivalent certifications.

Responsabilidades

• Conduct comprehensive penetration testing across web, mobile, and API targets for diverse clients.
• Perform network and infrastructure security assessments (wired, wireless, internal, external).
• Mentor junior team members.
• Engage with clients throughout engagements, guiding testing strategy and delivering actionable advice.
• Contribute to security assurance strategies, tools, and methodologies.
• Integrate security activities within client and internal projects.

Conhecimentos

Penetration testing

Source code review

Bug bounty

Security research

Technical reporting

English communication

OWASP / NIST

Formação académica

OSCP, OSWE, OSCE / OSEP certifications

Ferramentas

Burp Suite

Kali Linux

Descrição da oferta de emprego

phew Limited, Auckland, NZ, is seeking an experienced Senior Penetration Tester to join a quality-focused cyber security team. You will conduct deep penetration tests across web, mobile, and API targets for diverse clients, and guide security improvements from discovery to remediation.

You will mentor juniors, engage with clients, and contribute to testing frameworks, tooling, and methodologies. Sponsorship for suitable candidates planning a move to NZ is available; hybrid work with office in