Penetration Tester

Quick Facts

• Role: Penetration Tester

Description

Conduct penetration tests of web applications, systems, networks, and mobile applications, then analyze discovered vulnerabilities and prepare remediation recommendations. The role focuses on strong network and system technology knowledge and on producing high-quality analytical reports. You will also provide security guidance for systems, architecture, and source code, and coordinate remediation with development and IT administration teams.

Responsibilities

• Perform penetration tests of web applications, infrastructure, and mobile applications

• Identify vulnerabilities and weaknesses in systems and applications

• Analyze penetration testing results

• Create detailed reports describing vulnerabilities, their severity/criticality, and recommended remediation actions

• Provide security advice related to systems, architecture, and source code

• Collaborate with development and system administration teams to implement fixes and recommendations

• Support the organization in implementing security best practices and security methodologies

• Document findings and present them to IT teams and management

• Perform risk assessments and recommend appropriate mitigation measures

Requirements

• Minimum 3 years of experience in penetration testing of web applications, systems, and networks

• Good understanding of cryptography concepts and applied cryptography (e.g., SSL, AES)

• Very good knowledge of at least one scripting language: Perl, Python, Ruby, JavaScript, or Shell

• Very good knowledge of at least one high-level programming language: Java, C#, Go, C, or C++

• Knowledge of OWASP Top 10 and SANS Top 25

• Knowledge of exploit development techniques, vulnerability research, and vulnerability reporting

• Knowledge of OSI stack and TCP, computer architecture, and network protocols

• Knowledge of Windows/Linux operating system architecture

• Knowledge of LAN, WAN, VPN, proxy, firewall, and IDS/IPS technologies

• Experience in network traffic analysis and protocol diagnostics using Wireshark, tcpdump, Burp Suite, ZAP, or MITMproxy

• Strong analytical and reporting skills

Benefits

• Multisport card

• Private medical care