Penetration Tester | Vulnerability Analyst

Role Overview

Employment

• Employment type is full-time.
• The source describes the level as mid-level to senior.

Key Responsibilities

• Conduct authorized testing across web applications, APIs, networks, servers, cloud environments, and approved systems.
• Perform reconnaissance, asset discovery, vulnerability scanning, manual testing, automated testing, and configuration reviews.
• Validate findings, assess severity, analyze attack paths, and prioritize vulnerabilities according to organizational risk requirements.
• Test authentication, authorization, session management, input validation, access controls, APIs, web services, mobile applications, and cloud services where applicable.
• Research emerging vulnerabilities and work with technical teams on investigation, remediation, validation, and retesting.
• Prepare reports for technical and management audiences and present technical risks in business-relevant terms.
• Maintain vulnerability records and improve security testing methodologies, automation, assessment procedures, and reporting processes.

Requirements

• A bachelor’s degree in cybersecurity, information security, computer science, information technology, or a related field is required.
• Previous experience in penetration testing, vulnerability assessment, security testing, or cybersecurity analysis is required.
• Strong knowledge of network security, operating systems, web applications, APIs, databases, cloud environments, and security controls is required.
• Experience with vulnerability scanners, penetration-testing tools, network-analysis tools, and security-testing frameworks is required.
• Knowledge of Burp Suite, Nmap, Nessus, OpenVAS, Wireshark, or comparable platforms is advantageous.
• Scripting knowledge in Python, PowerShell, Bash, or similar languages is advantageous.
• Cloud security across AWS, Azure, or Google Cloud is preferred.
• Security frameworks such as NIST, ISO 27001, or CIS Controls and certifications such as OSCP, CEH, GPEN, Security+, eJPT, or PNPT are advantageous.

Professional Qualifications

• Candidates should demonstrate analytical and problem-solving ability, strong technical documentation, clear stakeholder communication, attention to detail, independent work capability, collaboration, and strict adherence to authorized testing procedures.

What We Offer

• The employer offers training, modern security-testing platforms, certification support, professional development, and exposure to diverse cybersecurity projects.
• The role provides opportunities to work with security engineers, developers, infrastructure teams, and security leaders.