About the Role
Our client is a cutting-edge cybersecurity consultancy that operates with a fully remote-first philosophy. We are seeking an elite Senior Penetration Tester to join our globally distributed team. This role is responsible for conducting comprehensive security assessments of client systems, networks, and applications to identify vulnerabilities and provide actionable remediation guidance. You will utilize your expertise in offensive security techniques to simulate real-world attacks, helping our clients strengthen their defenses. The ideal candidate is a passionate security researcher with a deep understanding of exploit development, web application security, network protocols, and system internals. This is an exceptional opportunity to work on diverse and challenging projects with a highly skilled, remote team, contributing to the security of a wide range of organizations worldwide.
Key Responsibilities
- Plan, execute, and document penetration tests across various environments (web applications, APIs, networks, mobile applications, cloud infrastructure).
- Identify and exploit security vulnerabilities, demonstrating potential business impact.
- Perform thorough vulnerability analysis and provide detailed, actionable remediation recommendations.
- Develop proof-of-concept exploits and custom testing tools.
- Conduct social engineering assessments and red team exercises.
- Stay up-to-date with the latest attack vectors, exploitation techniques, and security trends.
- Collaborate with clients to understand their security needs and provide expert advice.
- Contribute to the development of the company's testing methodologies and reporting standards.
- Mentor junior penetration testers and share knowledge within the team.Maintain detailed and accurate documentation of all testing activities and findings.
Requirements
- Bachelor's degree in Computer Science, Cybersecurity, or a related technical field, or equivalent practical experience.
- Minimum of 5 years of professional experience in penetration testing and offensive security.
- Demonstrated expertise in web application penetration testing, network penetration testing, and vulnerability assessment.
- Proficiency with penetration testing tools and frameworks (e.g., Metasploit, Burp Suite, Nmap, Nessus).
- Strong understanding of common vulnerabilities (e.g., OWASP Top 10) and their exploitation.
- Experience with scripting languages (e.g., Python, PowerShell) for automation and tool development.
- Knowledge of operating systems (Windows, Linux), networking protocols, and cloud security (AWS, Azure, GCP).
- Excellent report writing skills, with the ability to communicate technical findings to both technical and non-technical audiences.
- Relevant certifications such as OSCP, OSCE, GPEN, CEH, or CISSP are highly advantageous.
- Strong problem-solving abilities and a creative, analytical mindset.
Benefits
- Our client offers a fully remote working environment, providing unparalleled flexibility.
- This position comes with a highly competitive salary and performance-based bonuses.
- Comprehensive medical aid, life insurance, and retirement savings plans are provided.
- We invest heavily in continuous learning and professional development, offering a generous budget for training, conferences, and certifications.
- You will have the opportunity to work with a world-class team of security professionals on cutting-edge projects, making a real difference in protecting our client's diverse global clientele from threats.