Share
Responsibilities:
Conduct and participate in authorized penetration testing exercises.
Report on and prioritize issues to vendors, security team, and engineering through standard escalation processes.
Support the continuous development and maintenance of team frameworks and operating procedures.
Communicate new developments, breakthroughs, challenges and lessons learned to team members and leadership.
Collaborate with the development of cybersecurity strategy, policy, standards, and procedures.
Work with management and senior team members on how to integrate information security controls into enterprise environments to comply with established security standards and policies.
Continuously upgrade knowledge, skills & awareness in cybersecurity technologies by way of independent research, training, or any other self-improvement methods (e.g., Reading, HTB, CTF competitions)
Collaborate on additional projects, assignments, and initiatives as required.
Proficient in penetration testing, system/application/network security, OS internals, and security frameworks.
Experienced in web, API, and infrastructure testing; familiar with PCI-DSS and at least one specialized area like Cloud or Mobile Security.
Solid foundation in cryptography, low-level programming, debugging, and scripting for custom tools and exploits.
Hands-on with Metasploit and capable of writing code in languages like C, C++, Java, .NET, and Python.
Strong communication skills, report writing, and customer-focused mindset with a commitment to stakeholder collaboration.
Relevant Cybersecurity Certifications
Offensive Security:
Offensive Security Certified Professional (OSCP)
Security Wireless Professional (OSWP)
Global Information Assurance Certification (GIAC):
GIAC Penetration Tester (GPEN)
GIAC Web Application Penetration Tester (GWAPT)
26 September 2025
These jobs might be a good fit