Penetration Tester

About the role

We are looking for a Penetration Tester to assess the security of our applications, networks, cloud platforms and OT/ICS environments. The successful candidate will simulate real‑world attacks, uncover vulnerabilities and deliver clear recommendations to improve our defence posture.

Key responsibilities

• Conduct penetration testing across applications, networks, cloud, and OT/ICS systems.
• Perform vulnerability assessments and exploit analysis to uncover weaknesses.
• Identify and validate risks aligned with standards such as OWASP Top 10, SANS CWE Top 25, and NIST.
• Use tools like Metasploit, Burp Suite, Nmap, Wireshark and related frameworks.
• Collaborate with cross‑functional teams to ensure secure system design and implementation.
• Produce clear, actionable reports detailing findings, exploitation methods and remediation guidance.
• Track remediation progress and support engineering teams with root‑cause analysis.
• Maintain documentation of testing methodologies, standards and frameworks for consistency and compliance.

Required profile

• Bachelor’s degree in Computer Science, Cybersecurity or a related field.
• Minimum 2 years of professional experience in penetration testing and vulnerability assessment.
• Strong understanding of application and network security concepts.
• Familiarity with cloud security in Azure or AWS.
• Relevant certifications such as OSCP, CEH, GPEN or equivalent are preferred.

Required skills

• Burp Suite
• Metasploit
• Nmap
• Wireshark
• Python scripting
• Bash scripting
• PowerShell scripting
• Azure cloud security
• AWS cloud security