Penetration Testing Expert

As a Penetration Testing Expert at TCPWave, you will be responsible for performing advanced security testing on our products, infrastructure, and networks to identify and mitigate vulnerabilities. You will work closely with our security and development teams to ensure the highest level of security and resilience in our solutions. Penetration Testing: Conduct regular and comprehensive penetration tests on TCPWave products, services, and infrastructure to identify security vulnerabilities. Vulnerability Assessment: Perform detailed vulnerability assessments and risk analyses, providing actionable recommendations to mitigate identified risks. Security Audits: Conduct security audits to ensure compliance with industry standards and best practices. Incident Response: Assist in the development and execution of incident response plans to address security breaches and vulnerabilities. Security Research: Stay updated with the latest security threats, vulnerabilities, and technology trends. Conduct research to identify potential security risks. Reporting: Create detailed reports on findings from penetration tests and vulnerability assessments, including recommendations for remediation. Collaboration: Work closely with development, IT, and security teams to integrate security measures and best practices into TCPWave products and services. Training and Awareness: Provide training and support to team members and other departments on security best practices and emerging threats. Tool Development: Develop and maintain custom tools and scripts to automate security testing processes. Education: bachelors or masters degree in Computer Science, Information Technology, Cybersecurity, or a related field. Experience: Minimum of 5 years of experience in penetration testing, vulnerability assessment, and security auditing. Certifications: Relevant certifications such as CEH, OSCP, OSWE, GPEN, or equivalent. Technical Skills: Proficiency in security testing tools (eg, Metasploit, Burp Suite, Nessus, Wireshark, Nmap) and scripting languages (eg, Python, Bash). Knowledge: In-depth understanding of network protocols, web application security, operating systems, and cloud security. Analytical Skills: Strong analytical and problem-solving skills, with the ability to think like an attacker to identify potential security weaknesses. Communication: Excellent verbal and written communication skills, with the ability to clearly document and explain technical details to both technical and non-technical audiences. Team Player: Ability to work effectively in a collaborative team environment.