Mid-Level Penetration Test Engineer

Role overview Independently deliver security assessments across areas such as cloud infrastructure, mobile applications, and blockchain systems. The work spans the full engagement lifecycle, from defining assessment scope through testing and reporting, with opportunities to guide junior colleagues and communicate findings to varied audiences.

Responsibilities - Plan and conduct comprehensive penetration tests independently. - Lead projects from scoping through final reporting. - Develop custom tools or exploit code when an assessment calls for it. - Mentor junior team members and contribute to internal training materials. - Present assessment results to technical and non-technical stakeholders. - Share useful methods and findings in the internal knowledge base.

Requirements - At least three years of penetration testing or offensive security experience. - A professional certification such as OSCP, OSCE, or an equivalent qualification. - A record of discovering serious vulnerabilities. - Strong knowledge of networking protocols and security. - Experience with both manual and automated testing methods. - Clear report-writing and client communication skills, plus the ability to lead small projects independently.

Nice to have - Further certifications such as OSWE, OSEP, or GXPN. - Smart contract auditing experience, especially with Solidity. - Cloud security certifications or mobile application security experience. - Contributions to security tools or published vulnerability disclosures such as CVEs.

Benefits and work setup - Full-time role, remote from Turkey.