Penetration Tester

Responsibilities:

Conduct black-box, gray-box, and white-box penetration tests on web apps, Mobile apps, and APIs. Perform social engineering and phishing simulation campaigns Develop and execute custom exploits where necessary Document proof-of-concept exploits and provide risk-ranked findings Conduct red team exercises simulating advanced persistent threats (APT) Analyze security findings from Hacker One and recreate vulnerabilities Collaborate with developers, Appsec Team, DevOps, and product teams to provide remediation guidance Stay current on CVEs, exploits, hacker tools, and threat actor techniques (TTPs) Weekly updates and debriefs with stakeholders Manual Application and Api Penetration testing based on OWASP Top 10 (Mobile, Web, Api)

Requirements:

Proven experience in offensive security or ethical hacking Demonstrated history with Bug Bounty programs or CTF competitions Deep understanding of web technologies, cloud platforms, and modern infrastructure Ability to write and explain exploits or security PoCs clearly Strong report writing and communication skills. Tools and Platforms (it’s expected to know how to use at least one of each of the listed tools) Burp Suite, OWASP ZAP, Nmap Mobile security tools: MobSF, Frida, jadx, Objection, genny motion, Android Studio. Kali Linux, Parrot OS, custom scripts in Python, Bash, PowerShell. Postman, for API testing. Security Standards & Compliance OWASP Top 10 (Web, API, Mobile) • CIS Benchmarks NIST 800-53, ISO/IEC 27001 Preferred Qualifications CEH, OSCP, OSCE, GPEN, or similar certifications Experience working in CI/CD environments and with DevSecOps teams Programming or scripting experience (Python, JavaScript, Nodejs, php, Go, Bash)