Penetration Tester

Role overview Conduct offensive security assessments to find exploitable weaknesses and help clients improve their defenses. The work spans web applications, networks, and infrastructure, combining practical testing and vulnerability research with clear reporting and remediation guidance.

Responsibilities - Perform penetration tests across web applications, networks, and infrastructure. - Assess vulnerabilities and review code for security issues. - Emulate realistic attack scenarios, including advanced persistent threat tactics. - Write detailed technical reports, present findings, and explain remediation options to clients. - Track emerging attack methods and vulnerabilities, and create or maintain testing scripts and tools. - Work with clients to strengthen their security posture.

Requirements - At least three years of penetration testing or offensive security experience. - OSCP, OSCE, GPEN, or a comparable certification. - Strong understanding of web application risks, including the OWASP Top 10. - Experience with tools such as Burp Suite, Metasploit, and Nmap. - Scripting ability in Python, Bash, or PowerShell, plus knowledge of network protocols and security fundamentals. - Strong technical writing and communication skills, and the ability to work independently on client engagements.

Nice to have - Further offensive security certifications, such as OSEP, OSED, or GXPN. - Cloud or mobile application penetration testing experience, red team or adversary simulation work, or bug bounty and vulnerability research experience.

Benefits and work setup - Remote contract position.