Penetration Tester (Web and Network)

Job Description

Role & responsibilities

Roles&responsibilities

• Performmanualapplicationpenetrationtestsononeormoreof the following to discover and exploit vulnerabilities: web applications, internal applications, APIs, internal and external networks, and mobile applications
• PlanandexecutenetworkpenetrationtestingandRedteaming assessments to simulate real-world attack scenarios.
• Perform manual network and application penetration tests on internalnetwork,ActiveDirectoryenvironment,web applications.
• Performsocialengineeringassessmenttoassessthesecurity

awarenessandphysicalsecuritycontrolsoftheorganization.

• Ability to independently research for new vulnerabilities in systemsandsoftwareandmodifyandcustomizetools,known exploits, POCs and scripts to meet operational requirement.
• Researchandstayup-to-datewiththelatestattacktechniques, tools, and emerging threats.
• Present technical reports to clients, explaining the outcomes of thetestingandprovidingdetailedinsightsandrecommendations.
• Collaborateeffectivelywith cross-functionalteams,including developers, IT operations, and business stakeholders to integrate security best practices seamlessly into project workflows.
• Providementorshipandguidancetojuniorsecuritystaffand foster a culture of proactive security awareness within the organization.

Thisroleisforyouifyouhave the below

• We are seeking an experienced and highly skilled Consultantwith over 5+ years of working experience in the field of cybersecurity, including network penetrationtesting, vulnerability assessment, Active directory testing, phishing assessment and web application penetration testing. The ideal candidate will possess a strong working knowledge of Network protocols, performing OSINT to identify publicly available information and testing and exploiting Microsoft services like Windows Servers, Active directory, Certificate Services.

Mandatorytechnical& functional skills

• Performmanualapplicationpenetrationtests onone ormore of the following to discover and exploit vulnerabilities: web applications,internalapplications,APIs,internalandexternal networks, and mobile applications
• 5+yearsofprofessionalexperienceincybersecurity,witha

focusonNetworkpenetrationtestingandRedteaming.

• StrongunderstandingofNetworkprotocols,web applications, cryptography, various operating systems and security technologies.
• Strong understanding of exploitation of Microsoftplatform usedinenterpriseenvironmentsuchaswindowsServers, Active Directory Certificate Service, Azure, etc.
• Experience in one or more of the following a plus: Web applicationpenetrationtesting,mobileapplicationpenetration testing application architecture and business logic analysis.
• Relevantcertifications,suchasGWAPT,OSCP,OSEP, CRTP, CRTO, OSWA, are strongly preferred.

Preferred candidate profile

Immediate Joiner

Job Classification

Contact Details: