Penetration Tester (Web And Network)

As a Consultant in the field of cybersecurity, your role will involve performing various penetration tests to discover and exploit vulnerabilities in web applications, internal applications, APIs, networks, and mobile applications. This includes planning and executing network penetration testing and Red teaming assessments to simulate real-world attack scenarios. Additionally, you will conduct manual network and application penetration tests on internal network, Active Directory environment, and web applications. You will also be responsible for assessing security awareness and physical security controls through social engineering assessments. Your role will require you to independently research new vulnerabilities in systems and software, as well as customize tools and scripts to meet operational requirements. It is essential to stay up-to-date with the latest attack techniques, tools, and emerging threats. You will be expected to present technical reports to clients, providing detailed insights and recommendations based on the testing outcomes. Collaboration with cross-functional teams, including developers, IT operations, and business stakeholders, is crucial to seamlessly integrate security best practices into project workflows. Moreover, you will provide mentorship and guidance to junior security staff and promote a culture of proactive security awareness within the organization. Qualifications Required: - 5+ years of professional experience in cybersecurity, with a focus on network penetration testing and Red teaming - Strong understanding of Network protocols, web applications, cryptography, various operating systems, and security technologies - Proficiency in exploiting Microsoft platforms like Windows Servers, Active Directory, Certificate Services, Azure, etc. - Experience in web application penetration testing, mobile application penetration testing, application architecture, and business logic analysis would be advantageous - Relevant certifications such as GWAPT, OSCP, OSEP, CRTP, CRTO, OSWA are strongly preferred Your expertise in penetration testing, network penetration testing, and web application security testing will be key to success in this role. As a Consultant in the field of cybersecurity, your role will involve performing various penetration tests to discover and exploit vulnerabilities in web applications, internal applications, APIs, networks, and mobile applications. This includes planning and executing network penetration testing and Red teaming assessments to simulate real-world attack scenarios. Additionally, you will conduct manual network and application penetration tests on internal network, Active Directory environment, and web applications. You will also be responsible for assessing security awareness and physical security controls through social engineering assessments. Your role will require you to independently research new vulnerabilities in systems and software, as well as customize tools and scripts to meet operational requirements. It is essential to stay up-to-date with the latest attack techniques, tools, and emerging threats. You will be expected to present technical reports to clients, providing detailed insights and recommendations based on the testing outcomes. Collaboration with cross-functional teams, including developers, IT operations, and business stakeholders, is crucial to seamlessly integrate security best practices into project workflows. Moreover, you will provide mentorship and guidance to junior security staff and promote a culture of proactive security awareness within the organization. Qualifications Required: - 5+ years of professional experience in cybersecurity, with a focus on network penetration testing and Red teaming - Strong understanding of Network protocols, web applications, cryptography, various operating systems, and security technologies - Proficiency in exploiting Microsoft platforms like Windows Servers, Active Directory, Certificate Services, Azure, etc. - Experience in web application penetration testing, mobile application penetration testing, application architecture, and business logic analysis would be advantageous - Relevant certifications such as GWAPT, OSCP, OSEP, CRTP, CRTO, OSWA are strongly preferred Your expertise in penetration testing, network penetration testing, and web application security testing will be key to success in this role.