Key Responsibilities

• Perform penetration testing on applications, infrastructure, devices, and APIs

• Use manual and automated security testing tools to identify vulnerabilities

• Analyze and validate security findings with guidance where needed

• Apply security frameworks such as OWASP Top 10, SANS 25, and MITRE ATT&CK

• Support security assessments of cloud environments (AWS/Azure) and enterprise systems

• Test mobile applications (Android/iOS) and backend services

• Assist in security testing for embedded systems or firmware when applicable

• Develop basic scripts for testing and automation (Python, Bash)

• Document findings, including risk ratings (CVSS) and remediation suggestions

• Collaborate with development and infrastructure teams to address vulnerabilities

• Contribute to improving testing methodologies and security practices

────────────────────────────────────────────────────────

Required Skills & Experience

• Experience in penetration testing or security testing

• Hands-on experience with common security testing tools (manual and automated)

• Good understanding of OWASP Top 10, SANS Top 25, MITRE ATT&CK, and CVSS

• Experience testing APIs, applications, or infrastructure environments

• Basic knowledge of cloud environments (AWS and/or Azure)

• Solid foundation in Linux and networking fundamentals

• Scripting knowledge (Python or Bash) for basic automation

• Understanding of common vulnerabilities and exploitation techniques

• Strong analytical and problem-solving skills

• Good communication and documentation abilities

• Ability to work collaboratively within cross-functional teams

Show more
Show less