Penetration Tester (Web And Network)

Roles & responsibilities

• Perform manual application penetration tests on one or more of the following to
• discover and exploit vulnerabilities: web applications, internal applications, APIs,
• internal and external networks, and mobile applications
• Plan and execute network penetration testing and Red teaming assessments to
• simulate real-world attack scenarios.
• Perform manual network and application penetration tests on internal network,
• Active Directory environment, web applications.
• Perform social engineering assessment to assess the security
• awareness and physical security controls of the organization.
• Ability to independently research for new vulnerabilities in systems and software
• and modify and customize tools, known exploits, POCs and scripts to meet
• operational requirement.
• Research and stay up-to-date with the latest attack techniques, tools, and
• emerging threats.
• Present technical reports to clients, explaining the outcomes of the testing and
• providing detailed insights and recommendations.
• Collaborate effectively with cross-functional teams, including developers, IT
• operations, and business stakeholders to integrate security best practices
• seamlessly into project workflows.
• Provide mentorship and guidance to junior security staff and foster a culture of
• proactive security awareness within the organization.
• This role is for you if you have the below
• We are seeking an experienced and highly skilled Consultant with over 5+
• years of working experience in the field of cybersecurity, including network
• penetration testing, vulnerability assessment, Active directory testing, phishing
• assessment and web application penetration testing. The ideal candidate will
• possess a strong working knowledge of Network protocols, performing OSINT
• to identify publicly available information and testing and exploiting Microsoft
• services like Windows Servers, Active directory, Certificate Services.

Mandatory technical & functional skills

• Perform manual application penetration tests on one or more of the following to
• discover and exploit vulnerabilities: web applications, internal applications, APIs,internal and external networks, and mobile applications
• 5+ years of professional experience in cybersecurity, with a focus on Network penetration testing and Red teaming. Strong understanding of Network protocols, web applications, cryptography various operating systems and security technologies.
• Strong understanding of exploitation of Microsoft platform used in enterprise environment such as windows Servers, Active Directory Certificate Service, Azure, etc.
• • Experience in one or more of the following a plus: Web application penetration testing, mobile application penetration testing application architecture and business logic analysis.
• Relevant certifications, such as GWAPT, OSCP, OSEP, CRTP, CRTO OSWA, are strongly preferred.

Skills Required
Penetration Testing, Network Penetration Testing, Web Application Security Testing