Penetration Testing Engineer

In this vital role, you will be responsible for conducting authorized security tests on IT infrastructure to evaluate the strength of its systems against potential cyberattacks. You will perform security testing, including penetration testing and code reviews, to identify and exploit vulnerabilities. The ideal candidate will have a deep understanding of common vulnerabilities and penetration testing methodologies, using both automated tools and manual techniques to simulate real-world attacks. You will then work with the organization to prioritize, remediate, and report on identified issues, strengthening the overall security posture.

Roles & Responsibilities

• Security Testing & Vulnerability Assessment : Conduct security testing on networks, systems, applications, and infrastructure. You will use automated tools ( Burp Suite, OWASP ZAP, Acunetix ) and manual techniques to identify weaknesses such as SQL Injection, Cross-Site Scripting (XSS) , and Cross-Site Request Forgery (CSRF) .
• Exploitation & Post-Exploitation : Attempt to exploit discovered vulnerabilities to demonstrate their impact and prove their existence. You will perform advanced post-exploitation tasks to simulate real-world attack scenarios, such as retrieving sensitive data or elevating user privileges.
• Documentation & Reporting : Document identified vulnerabilities in detail, explaining how they were found, their severity, and their potential impact. You will include proof-of-concept (PoC) for critical vulnerabilities and offer actionable solutions for fixing them.
• Prioritization & Communication : Use risk-based prioritization to categorize issues by their severity and business impact. You will present findings to stakeholders, security teams, and management, explaining the business risk and potential impacts.
• Mentorship & Collaboration : Guide and support junior team members by offering technical advice and conducting code reviews. You will also work with third-party security vendors for audits and external assessments.
• Continuous Learning : Continuously learn about the latest vulnerabilities, exploits, and security trends to enhance the organization's security posture.

Technical Skills

Qualifications

Soft Skills

Skills Required

Penetration Testing, Security Testing, Documentation, Testing Methodologies, Web Application Architecture, Python, Bash