Penetration testing

About the Role

As a penetration tester at our fast-scaling cybersecurity firm, you'll be executing end-to-end penetration tests across various environments, simulating real-world attacks to expose hidden risks and drive measurable security improvements for our clients.

You'll work with elite offensive security teams, tackling real-world enterprise targets, and have access to bleeding-edge tools, labs, and CTF training environments.

Key Responsibilities

• Execute end-to-end penetration tests across web apps, APIs, networks, cloud environments (AWS/Azure/GCP), and internal systems.
• Simulate real-world attacks using Metasploit, Burp Suite, Nmap, Cobalt Strike, and custom scripts to bypass security controls.
• Document findings with clear technical write-ups, risk ratings, mitigation roadmaps, and executive summaries.
• Collaborate with blue teams and developers to validate remediations and conduct retesting for SLA compliance.
• Research emerging attack vectors, TTPs, and exploit frameworks to maintain offensive edge and toolchain relevance.
• Deliver client-facing presentations and training workshops to translate technical findings into business risk language.

Skills & Qualifications

• OWASP Top 10
• Metasploit
• Burp Suite
• Nmap
• Cobalt Strike
• Active Directory exploitation
• Linux command line
• Python scripting for automation
• Cloud pentesting (AWS/Azure/GCP)
• OSCP or equivalent certification

What You'll Learn

In this role, you'll gain hands-on experience with bleeding-edge tools, labs, and CTF training environments, and have the opportunity to work with elite offensive security teams tackling real-world enterprise targets.

You'll also develop your skills in simulating real-world attacks, documenting findings, and collaborating with blue teams and developers to drive measurable security improvements.

Resume Tip

When applying for this role, be sure to highlight your experience with cloud pentesting (AWS/Azure/GCP) and your knowledge of the MITRE ATT&CK framework, as these skills are highly valued in the industry.

Also, be prepared to provide specific examples of your experience with penetration testing tools such as Metasploit, Burp Suite, and Nmap, as well as your experience with Python scripting for automation.