Pen Tester

Seniority

• L3 (Intermediate)

Educational Qualifications

• 3-Year IT-related Degree

Relevant Experience

• 7–10 years of experience testing IT systems.
• Specialization in API and Cloud Penetration Testing.
• Proven ability to craft technical and executive-level reports for business audiences.

Required Certifications

• OSEP (Offensive Security Experienced Penetration Tester)
• OSWE (Offensive Security Web Expert)
• CRTE (Certified Red Team Expert)
• CEH (Certified Ethical Hacker)

Key Responsibilities

• Perform penetration testing of IT systems by simulating real-world attacks and exploiting vulnerabilities.
• Conduct API and cloud security assessments to identify security weaknesses and recommend remediation actions.
• Execute red team exercises to evaluate the effectiveness of security controls, detection capabilities, and incident response processes.
• Utilize offensive security frameworks, methodologies, and tools to assess organizational security posture.
• Identify, validate, and document security vulnerabilities and associated risks.
• Prepare clear, concise, and actionable reports for both technical and business stakeholders.
• Provide recommendations to improve security controls and reduce organizational risk exposure.
• Collaborate with security, infrastructure, application, and operations teams to support remediation activities.
• Stay current with emerging threats, attack techniques, and industry best practices.

Skills & Competencies

• Strong knowledge of penetration testing methodologies and offensive security techniques.
• Expertise in API security testing and cloud security assessments.
• Strong understanding of network, application, and infrastructure security.
• Excellent analytical, problem-solving, and reporting skills.
• Ability to communicate technical findings to both technical and non-technical audiences.
• Strong attention to detail and ability to work independently.