RNS Technology Services
Sr. Pen Tester
RNS Technology ServicesUnited Arab Emirates5 hours ago
Full-timeEngineering, Information Technology
Job Description

  • Conducted in-depth web application, mobile (Android iOS), Cloud and infrastructure assessments to identify vulnerabilities, debugged complex security issues, and guided clients through remediation for improved security posture.
  • Specialised in vulnerability assessments using security tools such as Nessus, Burp Suite, MobSF, and Metasploit; engineered custom scripts to automate repetitive tasks and streamline testing processes.
  • Administered security configurations and assessments on Windows/Linux environments, applying a deep understanding of its security model, Active Directory, and hardening techniques to mitigate potential attack vectors.
  • Fortified Linux environments with advanced Bash scripting and automation, enhancing system resilience and reducing manual intervention by optimising security workflows.
  • Integrate security-testing tools into CI/CD pipelines (SAST, DAST, SCA, Container Security).
  • Automate security checks using DevSecOps practices to ensure early detection of vulnerabilities.
  • Collaborate with development and DevOps teams to fix vulnerabilities and implement security best practices.
  • Designed and implemented strategies to align security practices with compliance standards, standardising processes to ensure continuous improvement and risk management.
  • Coordinate with the Application owners in fixing the vulnerabilities

RequiredSkills

  • Strong communication, presentation and collaboration skills.
  • Direct Customer handling experience (Onsite)
  • Hands-on experience on conducting thorough assessments of Infrastructure, cloud, web/API, and mobile
  • Hands-on experience with DevSecOps toolchains:
  • SAST (SonarQube, Checkmarx, Fortify)
  • DAST (OWASP ZAP, Burp Suite Pro, Netsparker, Tenable)
  • SCA (Black Duck, Snyk, WhiteSource)
  • Container Security (Aqua, Prisma, Anchore, Trivy)
  • Strong knowledge of CI/CD tools: Jenkins, GitLab CI/CD, Azure DevOps, GitHub Actions.

Key Skills

Ranked by relevance