Penetration Tester

• Perform penetration testing and security assessments on various technology platforms, including Web Applications, Mobile Applications (Android/iOS), APIs, Desktop Applications, Networks, Infrastructure, and Cloud Environments.
• Conduct vulnerability assessments, manual security testing, and exploitation activities to identify and validate security vulnerabilities.
• Develop, maintain, and continuously improve penetration testing methodologies, standards, frameworks, procedures, and testing guidelines to ensure consistent and effective security assessment practices.
• Present and communicate penetration testing findings and recommendations to technical teams, management, and other relevant stakeholders.
• Maintain proper documentation, testing evidence, and records of penetration testing activities.
• Keep up to date with emerging cybersecurity threats, vulnerabilities, attack techniques, security research, and penetration testing tools.
• Provide technical guidance, knowledge sharing, and mentoring to junior penetration testers when required.

Qualifications

• Bachelor’s Degree in Computer Science, Cybersecurity, Information Technology, or a related field.
• Minimum 3–5 years of professional experience in Penetration Testing, Vulnerability Assessment, or Security Operations Center.
• Strong knowledge of cybersecurity concepts, security vulnerabilities, and common attack techniques.
• Hands-on experience performing penetration testing on multiple technology platforms.
• Experience performing penetration testing within Financial Services, Capital Market, Banking, or other highly regulated industries is an advantage.
• Ability to independently manage penetration testing activities from planning and preparation through testing, reporting, and retesting.
• Strong analytical, problem-solving, and troubleshooting skills with attention to detail.
• Good communication, documentation, and presentation skills, both written and verbal.
• Ability to work independently as well as collaboratively within a Cybersecurity team.
• Relevant cybersecurity certifications such as CEH, CPENT, OSCP, CREST, or equivalent certifications are an advantage.