Penetration Tester

Key Responsibilities

Penetration Testing (Primary Focus) :

• Perform manual and automated penetration testing on web applications, APIs, infrastructure, and cloud-hosted environments.
• Conduct red team / purple team exercises to simulate advanced threat actor behavior using frameworks like MITRE ATT&CK.
• Identify security flaws, misconfigurations, and business logic vulnerabilities across hybrid and cloud environments.
• Use tools such as Burp Suite, Nmap, Metasploit, Cobalt Strike, and custom scripts to simulate attacks.
• Provide detailed reports with risk ratings, technical impact, and remediation recommendations.
• Collaborate with DevOps and application teams to validate, reproduce, and remediate identified issues.
• Continuously research and adopt emerging offensive techniques, vulnerabilities, and toolsets.

Cloud Security (Secondary but Required) :

Compliance and Governance Support :

Required Skills and Experience

Preferred Certifications (Offensive & Cloud Focused)