Penetration Tester (Ethical Hacker)

Job Description

We are seeking a highly motivated and detail-oriented Penetration Tester (Ethical Hacker) to join our Cyber Security team. In this role, you will identify, assess, and exploit security vulnerabilities across web applications, mobile applications, cloud environments, enterprise networks, and wireless infrastructure through authorized security testing.

The ideal candidate will have hands-on experience with penetration testing methodologies, vulnerability assessments, red team operations, and secure coding practices. You will work closely with security engineers, developers, and IT teams to improve the organization’s security posture by identifying risks before malicious attackers can exploit them.

Key Responsibilities

• Conduct authorized penetration testing on web applications, APIs, mobile applications, cloud platforms, and enterprise networks.
• Perform internal and external vulnerability assessments using industry-standard security tools.
• Execute network, wireless, and Active Directory security assessments.
• Simulate real-world cyberattacks through red team exercises and adversary emulation.
• Identify, validate, and exploit security vulnerabilities while documenting business impact.
• Prepare detailed penetration testing reports with risk ratings, technical findings, and remediation recommendations.
• Collaborate with development and infrastructure teams to verify vulnerability remediation.
• Perform source code reviews and secure application assessments when required.
• Conduct phishing simulations and social engineering assessments in accordance with organizational policies.
• Research emerging vulnerabilities, attack techniques, and threat intelligence.
• Develop custom scripts and tools to automate security testing activities.
• Maintain compliance with security frameworks such as NIST, MITRE ATT&CK, OWASP Top 10, CIS Controls, and PCI DSS.
• Support incident response investigations by identifying attack vectors and security weaknesses.
• Maintain detailed documentation of testing procedures, findings, and recommendations.

Required Qualifications

• Bachelor’s degree in Cyber Security, Computer Science, Information Technology, or a related field (or equivalent practical experience).
• 3–5 years of professional experience in penetration testing, vulnerability assessment, or offensive security.
• Strong understanding of networking protocols, operating systems, and web technologies.
• Experience with Linux and Windows administration.
• Excellent analytical, troubleshooting, and communication skills.
• Ability to explain technical findings to both technical and non-technical stakeholders.
• Strong knowledge of security standards and compliance requirements.

Required Technical Skills

• Penetration Testing
• Ethical Hacking
• Network Security
• Web Application Security
• API Security Testing
• Mobile Application Security
• Active Directory Security
• Cloud Security (AWS, Azure, GCP)
• OWASP Top 10
• MITRE ATT&CK Framework
• NIST Cybersecurity Framework
• Burp Suite Professional
• Metasploit Framework
• Nmap
• Nessus
• Wireshark
• Kali Linux
• SQLMap
• Hydra
• Nikto
• Gobuster
• PowerShell
• Python
• Bash Scripting
• Git

Preferred Certifications

• Offensive Security Certified Professional (OSCP)
• Certified Ethical Hacker (CEH)
• GIAC Penetration Tester (GPEN)
• GIAC Web Application Penetration Tester (GWAPT)
• CompTIA PenTest+
• CompTIA Security+
• Certified Information Systems Security Professional (CISSP) (Preferred for senior candidates)

Benefits

• Competitive salary with annual performance bonuses
• Medical, dental, and vision insurance
• Paid vacation, holidays, and parental leave
• Flexible hybrid work environment
• Professional certification reimbursement
• Annual cybersecurity training budget
• Career development and mentorship programs
• Employee wellness and assistance programs
• Tuition reimbursement