Senior Penetration Tester (Senior Security Researcher)

Senior Penetration Tester (Senior Security Researcher)

An innovative cybersecurity startup specializing in the development and provision of Continuous Threat Exposure Management product, along with a comprehensive suite of offensive cybersecurity services. Our offerings are designed to empower organizations by enhancing their ability to proactively identify and address security vulnerabilities. Through our advanced tools and expert insights, we provide a robust approach to securing digital infrastructures and assets.

In this role you will:

• support penetration testing, red teaming, and vulnerability assessments across diverse environments, including web applications, networks, and mobile platforms.
• Your responsibilities will include executing one-day exploits, identifying security weaknesses, and contributing innovative research ideas to enhance our AI-driven security solutions.
• This is a unique opportunity to thrive in a fast-paced, cutting-edge environment, sharpen your offensive security skills, and collaborate with top industry professionals.

If you're passionate about ethical hacking, cybersecurity research, and continuous learning, we'd love to hear from you!

Responsibilities

• Perform vulnerability assessments and penetration testing for web applications and networks.
• Document findings using a risk-based approach, conduct proof-of-concept (PoC) demonstrations, and assist clients in remediating security issues.
• Effectively communicate technical findings, remediation strategies, and risk implications to customers in a clear, professional manner, fostering trust and collaboration.
• Support offensive cybersecurity projects under the guidance of the Global War room manager, utilizing MITRE ATT&CK techniques, and others.
• Keep the team up to date with the latest security threats, attack methods, and tools while sharing knowledge with the team.
• Contribute to research initiatives by identifying areas for improvement in our AI-powered cybersecurity solutions.

Requirements

• 3 years' experience in application and infrastructure penetration testing. Vast experience with penetration testing tools and methodologies
• Understanding of cybersecurity concepts, including common vulnerabilities (e.g., OWASP Top 10, web application misconfigurations, network security flaws).
• Hands-on experience with penetration testing tools such as Nmap, Burp Suite, and Metasploit.
• Strong analytical and problem-solving skills with a self-driven learning mindset.
• Ability to document and communicate technical findings clearly and concisely.
• Fluent in English (both written and spoken) with strong teamwork and collaboration skills.

Advantage

• Experience with red team operations, including adversary emulation and advanced threat simulation in real-world environments. – High Advantage
• Programming knowledge in Python, Bash, or JavaScript.
• Familiarity with secure coding practices or experience in cybersecurity internships/projects.
• Background in IT, Cloud, or Technical Administration roles