Job Description

We are seeking a skilled Security Engineer with expertise in web, mobile, network, and cloud penetration testing to join our team. The role involves identifying vulnerabilities, providing remediation guidance, and collaborating with various teams to enhance security postures. Ideal candidates will have a strong foundation in offensive security, excellent communication skills, and the ability to present findings to both technical and non-technical stakeholders.

Responsibilities

• Conduct penetration tests on web and mobile applications, cloud environments, and network infrastructure.
• Identify and exploit vulnerabilities, document findings, and provide detailed remediation guidance.
• Perform secure code reviews and security assessments for applications and cloud architectures.
• Collaborate with development, IT, and security teams to improve the overall security posture.
• Prepare comprehensive security reports, including technical details and executive summaries.
• Stay updated on the latest security threats, tools, and techniques.
• Assist in threat modeling and security architecture reviews for applications and cloud services.
• Participate in red teaming and adversary simulation exercises.

Requirements

• 6 months - 1 year of hands-on experience in penetration testing (web, mobile, network, and cloud).
• Proficiency with tools like ZAP, Metasploit, Nmap, Nessus, and AWS/Azure security tools.
• Strong understanding of OWASP Top 10, OWASP ASVS, and other security standards.
• Experience in testing cloud environments (AWS, Azure, GCP), including cloud-specific misconfigurations.
• Strong communication and report-writing skills, with the ability to present findings to various stakeholders.
• Scripting and automation experience in Python, Bash, or PowerShell (preferred).