Remote Ethical Hacker for Cloud & Apps Security

OVA.Work; New York (NY); Hybrid; USD 110,000 - 180,000; Full time

Job summary

OVA.Work is seeking a Penetration Tester (Ethical Hacker) to identify and remediate security vulnerabilities across apps, networks, and cloud environments. The role includes authorized tests and real-world attack simulations to strengthen the organization’s defenses.

The ideal candidate has strong offensive security knowledge, vulnerability management experience, and the ability to deliver actionable reports with clear risk ratings and remediation guidance for technical and non-technical

Qualifications

• Experience performing authorized security assessments and penetration tests.
• Familiarity with OWASP Top 10 and MITRE ATT&CK frameworks.
• Ability to document findings with clear risk ratings and remediation guidance.
• Experience with agile, DevSecOps, and secure SDLC practices.

Responsibilities

• Conduct penetration tests on web apps, APIs, mobile apps, networks, cloud environments.
• Perform vulnerability assessments and security audits to identify weaknesses.
• Simulate real-world attack scenarios to evaluate controls.
• Analyze findings and deliver detailed reports with remediation guidance.
• Validate fixes through retesting.
• Review system architectures for security.
• Assist teams in implementing security best practices.
• Conduct reconnaissance, threat modeling, and attack surface analysis.
• Stay informed about emerging threats and techniques.
• Support red team exercises and security awareness initiatives.
• Ensure testing complies with legal and regulatory requirements.

Skills

Cybersecurity fundamentals

Web security testing

Network security testing

Cloud security testing

Analytical skills

Report writing

Stakeholder communication

Education

Bachelor's degree in Cybersecurity / Information Security / CS

Tools

Burp Suite

OWASP ZAP

Nessus

Nmap

Metasploit

Qualys

Rapid7

Tenable

Python

PowerShell

Bash

Job description

OVA.Work is seeking a Penetration Tester (Ethical Hacker) to identify and remediate security vulnerabilities across apps, networks, and cloud environments. The role includes authorized tests and real-world attack simulations to strengthen the organization’s defenses.

The ideal candidate has strong offensive security knowledge, vulnerability management experience, and the ability to deliver actionable reports with clear risk ratings and remediation guidance for technical and non-technical