Penetration Tester

We are looking for a Red Team expert with a deep understanding of both information security and computer science. The ideal candidate will be adept at learning advanced concepts such as application manipulation, exploit development, and stealthy operations.

Key Responsibilities:

• Perform penetration testing on physical devices to identify vulnerabilities in network protocols.
• Analyze and exploit vulnerabilities in embedded systems and network protocols.
• Conduct red team exercises to simulate advanced persistent threats (APTs).
• Develop and execute advanced attack strategies to evaluate the security posture of an organization.
• Document findings, provide remediation guidance, and present technical details to stakeholders.
• Stay updated with the latest security trends, vulnerabilities, and attack methodologies.

Requirements:

• 4 years of experience leading penetration testing.
• Proficiency in web application and API penetration testing.
• In-depth knowledge of networking and internet protocols and ability to learn custom protocols.
• Experience with security tools such as Nmap, Metasploit, Kali Linux, Burp Suite Pro, etc., as well as various commercial and self-developed testing tools.
• Proficiency in scripting languages such as Python, Shell, C/C++/C#.
• Detailed technical knowledge in multiple security domains (Web, Network, OS, DB, IoT).
• Expertise in performing advanced exploitation and post-exploitation attacks as part of ethical hacking exercises, including writing proof-of-concept exploits and creating custom payloads and modules for common ethical hacking frameworks and tools.
• Strong analytical and problem-solving skills with a keen eye for detail.
• Excellent communication skills to articulate complex security issues to technical and non-technical stakeholders.

Advantage:

• Experience with BIOS attacks.
• Participation in security research activities, including publishing papers or presenting at conferences.
• Relevant certifications such as OSCP, OSCE, or CEH.