Medior Security Penetration Tester

As a Medior Security Penetration Tester, you will act as a digital detective, proactively identifying vulnerabilities across diverse systems to fortify critical infrastructure. This role offers the thrilling challenge of ethical hacking in a high-impact environment, directly enhancing the security posture of a vital public institution.

CONTEXT

In the digital battlefield, defense is crucial, but offense is often the best form of defense. Our client, a major player in its sector, understands this perfectly. To stay ahead of increasingly sophisticated cyber threats, they are building a formidable offensive security team, a squad of ethical hackers dedicated to finding weaknesses before malicious actors do. This isn't just about scanning for vulnerabilities; it's about thinking like an adversary, creatively exploiting potential entry points, and meticulously dissecting complex systems. You will step into a role where your analytical skills and technical prowess will be put to the ultimate test, simulating real-world attacks to strengthen the defenses of systems that underpin public trust and national security. With a vast and varied digital footprint, from critical web applications and intricate network infrastructures to sprawling Active Directory environments, every day presents a new puzzle to solve and a new challenge to overcome.

ACTIVITIES

Independently plan, execute, and document comprehensive penetration tests across a wide range of targets, including web applications, APIs, administration portals, network segments, and Windows/Active Directory environments.
Utilize a variety of manual and automated testing tools and techniques to discover and exploit security vulnerabilities.
Perform detailed analysis of identified vulnerabilities, assessing their potential impact and exploitability.
Develop clear, concise, and actionable technical reports detailing findings, exploit narratives, and practical recommendations for remediation.
Collaborate with development, operations, and security teams to communicate findings, explain risks, and support remediation efforts.
Participate in scoping discussions and define testing methodologies for new engagements.
Stay abreast of the latest exploits, vulnerabilities, and offensive security techniques, continuously enhancing your skill set.
Receive senior support and guidance for highly complex or novel penetration testing missions, fostering continuous learning and growth.
Contribute to the improvement of internal penetration testing methodologies, tools, and processes.

EXPECTED ACHIEVEMENTS

Proactive identification and clear reporting of critical security vulnerabilities across key applications and infrastructure, preventing potential breaches.
Significant contribution to the enhancement of the client's offensive security capabilities and overall cybersecurity posture.
Successful collaboration with development and operations teams to ensure efficient and effective remediation of discovered weaknesses.
Development of a strong personal reputation as a skilled and reliable ethical hacker within a critical environment.
Directly impacting the security and resilience of vital public services, contributing to public safety and national digital defense.

ENVIRONMENT

OWASP Top 10, SANS Top 25, Kali Linux, Burp Suite Pro, Nmap, Metasploit, Nessus/Qualys, PowerShell, Python scripting, Active Directory exploitation tools, Web Application Security, API Security, Network Penetration Testing, Cloud Security (beneficial), Social Engineering concepts, Red Teaming (exposure), Agile/DevSecOps principles.