Penetration Tester

Astra Security Inc; United States; Remote; USD 80,000 - 120,000; Full time

Job summary

A leading cybersecurity company is seeking a skilled pentester to perform comprehensive penetration tests on various applications and infrastructure. This remote role involves managing pentests, interacting with clients, and maintaining a vulnerability management system. Ideal candidates will have relevant certifications and experience in pentesting, along with a strong understanding of security guidelines.

Qualifications

• 3-5 years of professional experience in pentesting various assets.
• Experience in Black Box and WhiteBox testing.

Responsibilities

• Performing hacker-style pentests on customer applications.
• Maintaining the vulnerability management system.
• Interacting with clients over remediation calls.

Skills

Understanding of OWASP testing guidelines

Interfacing with customers

Understanding of code

Education

OSCP or CREST certification

Job description

Job Description

This is a remote position.

At Astra you will be:

1. Performing hacker-style pentests on our customer’s applications and managing the entire pentest using our unique platform.
2. Carrying out VA/PT for web apps, mobile apps, cloud infrastructure, SaaS apps, network devices, open-source projects, etc.
3. Contributing to building intelligence for our DAST scanner.
4. Interacting with clients over remediation calls.
5. Facilitating clients in mapping out steps to fix vulnerabilities.
6. Maintaining our vulnerability management system.

Requirements

• OSCP or CREST certified.
• Strong understanding of OWASP testing guidelines.
• 3-5 years of professional experience in pentesting various assets including web apps and cloud infrastructure.
• Experience in Black Box and WhiteBox testing, capable of identifying business logic vulnerabilities.
• Experience interfacing directly with customers via calls and emails.
• Ability to understand code in at least one programming language.

Good to have:

• Bug bounty or CTF experience.