Penetration Test Engineer - Vulnerability Assessment

Description : Job Summary :

We are seeking a passionate and detail-oriented Network / Infrastructure Pentester with 4+ years of hands-on experience in manual security assessments. The ideal candidate will have strong expertise in identifying, exploiting, and reporting vulnerabilities in internal and external infrastructure, networks, firewalls, VPNs, and other critical assets. This role focuses on manual testing techniques, not just tool-driven scans, and requires deep technical understanding of networks, protocols, and system-level exploits.

Key Responsibilities :

• Perform manual infrastructure and network penetration testing (internal and external).
• Assess firewalls, routers, switches, VPNs, load balancers, servers, etc., for misconfigurations and vulnerabilities.
• Conduct port scanning, banner grabbing, service enumeration, and protocol-level analysis.
• Exploit discovered vulnerabilities using manual methods and custom scripts (e.g., Python, Bash).
• Identify and exploit common misconfigurations (e.g., SMB shares, weak SNMP strings, default credentials).
• Analyze and exploit network services (DNS, SMTP, FTP, SSH, RDP, etc.)
• Test for segmentation flaws and lateral movement opportunities within internal networks.
• Assess cloud infrastructure (AWS / Azure / GCP) from a network and IAM perspective (bonus).
• Generate detailed, clear, and actionable technical and executive-level reports.
• Collaborate with system / network administrators and DevOps teams to explain findings and remediation steps.
• Stay updated with emerging threats, exploits, and TTPs (Tactics, Techniques, and Procedures).

Technical Skills & Tools Expected :

Manual Pentesting & Recon :

Exploitation & Tools :

Vulnerability Analysis :

Reporting & Documentation :

Preferred Certifications (not mandatory but an advantage) :

Soft Skills :

Bonus Skills (Not Required but Nice to Have) :

(ref : hirist.tech)