Penetration Tester

Scope of Work:

• Conduct internal penetration testing of web applications and APIs.
• Perform cloud penetration testing (focus on AWS/Azure/GCP environments as applicable).
• Review and audit firewall rules and network segmentation for misconfigurations and risks.
• Provide detailed technical reports with risk ratings and remediation recommendations.
• Support ad-hoc testing needs from product and infrastructure teams.
• Participate in scoping, kickoff, and debrief sessions with relevant stakeholders.
• Ensure testing aligns with internal security policies and compliance requirements.

Required Skills:

• Strong experience in web application and API penetration testing (e.g., OWASP Top 10, SSRF, auth bypass, etc.).
• Hands-on experience with cloud security assessments (AWS/Azure/GCP).
• Ability to assess firewall rules and network architecture from a security perspective.
• Familiarity with tools like Burp Suite Pro, Nmap, Nessus, Amass, and cloud-native tooling (e.g., ScoutSuite, Prowler).
• Solid reporting skills—clear, actionable write-ups for technical and business audiences.
• OSCP or equivalent required; OSWE, CCSK, or cloud certs (e.g., AWS Security Specialty) are a plus.
• Good communication and ability to work closely with dev, infra, and security teams.

NB: Security check required