Penetration Tester / Web and Network PT Consultant

In this role, you will be responsible for performing manual application penetration tests on various systems such as web applications, internal applications, APIs, internal and external networks, and mobile applications. Additionally, you will plan and conduct network penetration testing and Red teaming assessments to simulate real-world attack scenarios. It will be your duty to execute manual network and application penetration tests on the internal network, Active Directory environment, and web applications. You will also be required to conduct social engineering assessments to evaluate the security awareness and physical security controls of the organization. Your role will involve independently researching new vulnerabilities in systems and software, as well as customizing tools, exploits, POCs, and scripts to meet operational needs. Staying updated with the latest attack techniques, tools, and emerging threats will also be part of your responsibilities. Furthermore, you will present technical reports to clients, detailing the testing outcomes and providing insightful recommendations. Collaboration with cross-functional teams, including developers, IT operations, and business stakeholders, to seamlessly integrate security best practices into project workflows is essential. Moreover, you will provide mentorship and guidance to junior security staff, fostering a culture of proactive security awareness within the organization. Qualifications required for this role include: - Over 5 years of working experience in cybersecurity, including network penetration testing, vulnerability assessment, Active Directory testing, phishing assessment, and web application penetration testing. - Strong knowledge of network protocols, OSINT, and testing and exploiting Microsoft services like Windows Servers, Active Directory, and Certificate Services. Mandatory technical and functional skills include: - Professional experience in cybersecurity with a focus on network penetration testing and Red teaming. - Understanding of network protocols, web applications, cryptography, various operating systems, and security technologies. - Proficiency in exploiting Microsoft platforms used in enterprise environments such as Windows Servers, Active Directory Certificate Service, and Azure. - Experience in web application penetration testing, mobile application penetration testing, application architecture, and business logic analysis is a plus. - Relevant certifications such as GWAPT, OSCP, OSEP, CRTP, CRTO, and OSWA are strongly preferred. If you possess the above qualifications and skills, this role might be a perfect fit for you. In this role, you will be responsible for performing manual application penetration tests on various systems such as web applications, internal applications, APIs, internal and external networks, and mobile applications. Additionally, you will plan and conduct network penetration testing and Red teaming assessments to simulate real-world attack scenarios. It will be your duty to execute manual network and application penetration tests on the internal network, Active Directory environment, and web applications. You will also be required to conduct social engineering assessments to evaluate the security awareness and physical security controls of the organization. Your role will involve independently researching new vulnerabilities in systems and software, as well as customizing tools, exploits, POCs, and scripts to meet operational needs. Staying updated with the latest attack techniques, tools, and emerging threats will also be part of your responsibilities. Furthermore, you will present technical reports to clients, detailing the testing outcomes and providing insightful recommendations. Collaboration with cross-functional teams, including developers, IT operations, and business stakeholders, to seamlessly integrate security best practices into project workflows is essential. Moreover, you will provide mentorship and guidance to junior security staff, fostering a culture of proactive security awareness within the organization. Qualifications required for this role include: - Over 5 years of working experience in cybersecurity, including network penetration testing, vulnerability assessment, Active Directory testing, phishing assessment, and web application penetration testing. - Strong knowledge of network protocols, OSINT, and testing and exploiting Microsoft services like Windows Servers, Active Directory, and Certificate Services. Mandatory technical and functional skills include: - Professional experience in cybersecurity with a focus on network penetration testing and Red teaming. - Understanding of network protocols, web applications, cryptography, various operating systems, and security technologies. - Proficiency in exploiting Microsoft platforms used in enterprise environments such as Windows Servers, Active Directory Certificate Service, and Azure. - Experience in web application penetration t