Penetration Tester

RedFortress Technologies; Pakistan; Remote; PKR 1,000,000 - 1,800,000; Full time

Job summary

RedFortress Technologies seeks a hands-on penetration tester to cover web, API, mobile, and internal network assessments end-to-end, from scoping calls to retesting.

You will plan and execute engagements, develop PoC exploits for issues found, and deliver clear, reproducible reports with prioritized remediation guidance. You will present findings to both technical and executive audiences and contribute tooling and method improvements back to the team.

Qualifications

• Two or more years of professional penetration testing experience.
• Strong understanding of web application and network attack surfaces.
• Scripting ability in Python or Go.
• Clear written English with readable reports.
• Comfort working within documented rules-of-engagement.

Responsibilities

• Plan and execute web, API, mobile and internal network assessments.
• Develop proof-of-concept exploits for identified issues.
• Write clear, reproducible reports with prioritised remediation guidance.
• Present findings to technical and executive audiences.
• Contribute tooling and methodology improvements back to the team.

Skills

Penetration testing

Web app security

Network security

Python scripting

Go scripting

Technical writing

Job description

Run hands-on web, API and network assessments end to end, from scoping call to retest.

We care more about demonstrated tradecraft than the length of a certification list.

Responsibilities

• Plan and execute web, API, mobile and internal network assessments
• Develop proof-of-concept exploits for identified issues
• Write clear, reproducible reports with prioritised remediation guidance
• Present findings to technical and executive audiences
• Contribute tooling and methodology improvements back to the team

Requirements

• — Two or more years of professional penetration testing experience
• — Strong understanding of web application and network attack surfaces
• — Scripting ability in Python, Go or similar
• — Clear written English and a track record of readable reports
• — Comfort working within a documented rules-of-engagement discipline