Penetration Tester

Job Title: Applicative Penetration Tester - Team Leader

Position Type: Full-Time

About the Role:

We seek an experienced Applicative Penetration Tester to lead our offensive security team. In this role, you will conduct and manage advanced penetration tests on web and mobile applications, identify vulnerabilities, and work closely with development teams to ensure that security best practices are followed. As a team leader, you will guide, mentor, and manage a team of penetration testers, ensuring high-quality deliverables and continued professional growth.

Key Responsibilities:

- Lead and conduct application security assessments, including vulnerability assessments and penetration tests, on web and mobile applications.

- Identify, exploit, and document vulnerabilities to demonstrate real-world risks.

- Provide detailed reports outlining findings, recommended mitigations, and remediation steps.

- Collaborate with development, IT, and other security teams to ensure that vulnerabilities are resolved promptly.

- Manage and mentor a team of penetration testers, ensuring ongoing skill development and knowledge sharing.

- Stay up-to-date with the latest cybersecurity trends, tools, and techniques, and ensure the team is well-versed in new attack vectors and methodologies.

- Work with clients to understand their security needs and provide tailored solutions to meet their requirements.

Qualifications:

- Proven experience (2+ years) in penetration testing with a focus on application security.

- Strong understanding of web and mobile application security, including common vulnerabilities such as SQL Injection, Cross-Site Scripting (XSS), and other OWASP Top 10 vulnerabilities.

- Experience with security tools such as Burp Suite, OWASP ZAP, Metasploit, and other penetration testing tools.

- Proficiency in scripting and programming languages (e.g., Python, JavaScript) to automate tasks and exploit vulnerabilities.

- Strong leadership and team management skills.

- Excellent communication skills, with the ability to convey technical findings to non-technical stakeholders.

- Relevant certifications (e.g., OSCP, OSWE, CEH) are highly desirable.

Why Join Us:

- Be a part of a dynamic and growing team at the forefront of cybersecurity.

- Lead cutting-edge projects and work with leading technologies.

- Opportunity for personal and professional growth in a supportive environment.