Penetration testing

About the Role

This role involves simulating real-world attacks on various systems, networks, and applications to identify vulnerabilities and expose hidden risks. As a penetration tester, you will execute end-to-end penetration tests, document findings, and collaborate with blue teams and developers to validate remediations. You will also research emerging attack vectors and maintain an offensive edge by staying up-to-date with the latest tools and techniques.

Key Responsibilities

• Execute end-to-end penetration tests across web apps, APIs, networks, cloud environments, and internal systems.
• Simulate real-world attacks using Metasploit, Burp Suite, Nmap, Cobalt Strike, and custom scripts to bypass security controls.
• Document findings with clear technical write-ups, risk ratings, mitigation roadmaps, and executive summaries.
• Collaborate with blue teams and developers to validate remediations and conduct retesting for SLA compliance.
• Research emerging attack vectors, TTPs, and exploit frameworks to maintain offensive edge and toolchain relevance.
• Deliver client-facing presentations and training workshops to translate technical findings into business risk language.

Skills & Qualifications

• OWASP Top 10
• Metasploit
• Burp Suite
• Nmap
• Cobalt Strike
• Active Directory exploitation
• Linux command line
• Python scripting for automation
• Cloud pentesting (AWS, Azure, GCP)
• OSCP or equivalent certification (preferred)
• Bachelor's degree in Computer Science or related field

What You'll Learn

In this role, you will gain hands-on experience with various penetration testing tools and techniques, as well as the opportunity to work with elite offensive security teams tackling real-world enterprise targets. You will also learn how to translate technical findings into business risk language and deliver client-facing presentations.

Resume Tip

When applying for this role, make sure to include specific examples of your penetration testing experience and the tools you have used. Highlight any relevant certifications, such as OSCP, and mention any experience you have with cloud pentesting and Active Directory exploitation.