Middle Penetration Tester

The primary purpose of a Penetration Tester to conduct penetration testing activities to identify vulnerabilities, exploit weaknesses, and recommend remediation measures across various systems, networks, and applications.

About your key responsibilities and impact:

• Conducting comprehensive penetration tests on web applications to identify security vulnerabilities;
• Utilizing both manual and automated techniques to discover and exploit security vulnerabilities;
• Performing code review during penetration testing;
• Developing detailed reports documenting findings, including clear and actionable recommendations for remediation;
• Staying up-to-date with the latest cybersecurity threats, vulnerabilities, and mitigation techniques, and actively contribute to the team’s knowledge base.

Essential professional experience:

• Proficiency in using industry-standard penetration testing tools such as Burp Suite, OWASP ZAP, and Metasploit;
• Extensive knowledge of web application security vulnerabilities and exploitation techniques;
• Strong understanding of web technologies and programming languages (ASP.NET, Java, Python, Go);
• Experience with various operating systems, including Windows and Linux;
• Knowledge of secure coding practices.

Desirable skills and personal features:

• Ability to effectively communicate complex security concepts to technical and non-technical stakeholders, and collaborate with cross-functional teams;
• Strong problem-solving skills to identify security vulnerabilities, assess risks, and develop effective solutions to mitigate them;
• Capacity to work collaboratively in a team environment, share knowledge, and support colleagues in achieving common security goals;
• Flexibility to adapt to changing priorities, technologies, and security threats, and quickly learn new tools and techniques as needed;
• Certifications (Optional): OSCP, HTB CPTS, CompTIA PenTest+, OSWA, eCPPT, eWPT, GWAPT.