Penetration Tester

About the role

SCIENTE is seeking a Penetration Tester to identify, analyse and exploit security vulnerabilities across networks, applications and cloud environments using ethical hacking techniques. The role strengthens the organisation's security posture by delivering actionable insights and detailed risk assessments.

Key responsibilities

• Conduct penetration testing across web applications, APIs, networks, infrastructure and cloud environments
• Perform vulnerability assessment and validate vulnerabilities through controlled exploitation
• Identify weaknesses such as OWASP Top 10 issues, authentication/authorisation flaws, injection vulnerabilities, misconfigurations and privilege escalation
• Run internal and external network tests and assess network security controls
• Assess Active Directory security, including privilege escalation, credential attacks and lateral movement
• Test REST APIs, mobile applications and cloud environments where applicable
• Develop or customise scripts, payloads and tools to support testing
• Analyse results, assess business impact and risk, and write detailed reports with findings, evidence, risk ratings and remediation recommendations
• Work with security and technology teams to validate fixes and re-test, and stay current on new vulnerabilities and attack methods

Required profile

• Diploma or degree in Cybersecurity, Computer Science or Information Technology
• At least 3 years of hands-on penetration testing experience
• Strong experience in web application and API penetration testing
• Strong analytical, problem-solving and report-writing skills

Required skills

• Network security, TCP/IP, HTTP/HTTPS, DNS and common protocols
• OWASP Top 10 and common web vulnerabilities
• Linux and Windows environments
• Active Directory, privilege escalation and lateral movement
• Scripting in Python, PowerShell or Bash
• Burp Suite, Nmap, Metasploit, Kali Linux, Wireshark, BloodHound, Impacket and Nessus
• Desired: AWS, Azure or GCP penetration testing and certifications such as OSCP, OSWE, OSEP, CREST, GPEN or CEH

Candidates apply by sending their updated resume to the employer; only shortlisted candidates will be contacted for interviews.