Responsibilities:

Perform advanced penetration testing on web applications, mobile applications, networks, and IT infrastructure.
Identify security vulnerabilities and assess their potential impact.
Conduct manual and automated security testing.
Simulate real-world attack scenarios to evaluate the effectiveness of existing security controls.

Document and report vulnerabilities along with comprehensive risk assessments and remediation recommendations.
Develop detailed and structured penetration testing reports for stakeholders.
Provide post-assessment debriefings to management and technical teams.

Develop, maintain, and enhance automated security testing frameworks.
Evaluate and implement new tools and technologies to improve penetration testing capabilities.

Keep abreast of emerging threats, vulnerabilities, and industry best practices.
Develop and share knowledge on new attack vectors, techniques, and mitigation strategies.

Work closely with PO, SRE, developers, and security teams to resolve identified vulnerabilities.
Participate in incident response and forensic analysis when required.
Assist in the development of security policies and procedures.

Requirements:

Bachelor’s degree in computer science, Cybersecurity, Information Technology, or a related field.
Relevant certifications are highly preferred (e.g., OSCP, OSWE, CEH).
Minimum of 3-5 years of experience in penetration testing and vulnerability assessment.
Proven track record of conducting successful penetration tests and identifying critical vulnerabilities.
Strong experience with penetration testing tools (e.g., Burp Suite, Metasploit, Nessus, Nmap, Kali Linux).
Hands-on experience with scripting languages (e.g., Python, Bash, PowerShell) to develop testing scripts.

In-depth understanding of web, mobile, and network security principles.
Familiarity with secure coding practices and security testing methodologies (e.g., OWASP, NIST).
Proficient in analyzing and exploiting common vulnerabilities (e.g., SQL Injection, XSS, CSRF).
Strong analytical and problem-solving skills.
Excellent verbal and written communication skills.