Penetration Tester

Key Responsibilities

The Penetration Tester’s primary responsibility is to conduct both manual and automated security assessments and penetration tests on our IT systems and applications. Other key responsibilities include:

• Identifying potential vulnerabilities and making remediation recommendations to ensure the ongoing security of our IT systems and applications.
• Developing and maintaining testing methodologies and tools to ensure the effectiveness and efficiency of our testing processes.
• Staying up-to-date with the most recent security threats and vulnerabilities, and using appropriate testing methodologies and tools to identify and mitigate them.
• Collaborating with IT teams to prioritize and resolve security issues as soon as possible.
• Creating detailed reports that clearly and accurately document the results of security assessments and penetration tests.
• Providing training and support to IT teams on security testing methodologies and tools to promote a culture of security awareness and best practices.
• Effectively communicating with stakeholders, including technical and non-technical audiences, to ensure that the findings and recommendations of security assessments and penetration tests are understood.
• Collaborating with outside security consultants and vendors to identify and fix security flaws.

Qualification Needed

To be considered for this position, candidates must meet the following qualifications:

• Bachelor's degree in Computer Science, Information Systems, or a closely related field is required.
• 3+ years of penetration testing experience, with a focus on network and application security.
• Knowledge of penetration testing methodologies and tools such as Nmap, Metasploit, and Burp Suite is required.
• Knowledge of vulnerability databases such as CVE and NVD, as well as experience with vulnerability scanning tools such as Nessus and Qualys.
• Strong analytical and problem-solving abilities, as well as the ability to identify and mitigate potential security threats are required.
• Excellent interpersonal and communication skills, as well as the ability to communicate complex security concepts to both technical and non-technical audiences.
• Security certifications such as the OSCP, OSCE, or GPEN are highly desired.
• Extensive knowledge of web application development, coding, and scripting languages such as Python, Java, or Ruby is preferred.

Conclusion:

In summary, our company is seeking a highly skilled and experienced Penetration Tester to join our organization and help ensure the security of our IT systems and applications. The successful candidate will be responsible for performing security assessments and penetration tests, identifying potential vulnerabilities, and making remediation recommendations. To qualify, candidates must have extensive experience in penetration testing, with a focus on network and application security, as well as strong analytical, problem-solving, and communication skills. Candidates with experience in vulnerability scanning tools and web application development, as well as relevant security certifications, are highly desired. If you are passionate about security and have the skills and experience we are looking for, we encourage you to apply for this exciting opportunity.