Overview
Find and prove security weaknesses in applications, APIs, networks and cloud before attackers do.
What you'll do
- Plan and scope penetration tests with system owners
- Test web applications, APIs, networks and cloud configurations
- Exploit and chain findings safely to show real impact
- Write clear reports with risk ratings and remediation advice
- Retest fixes and confirm closure
- Support red-team or assumed-breach exercises where needed
What you bring
- Hands-on penetration testing experience
- Web and API testing against the OWASP Top 10
- Burp Suite, Nmap, Metasploit or similar tooling
- Network and Active Directory testing
- Scripting in Python or Bash
- Clear technical report writing
You don't need every item on this list. If most of it fits, send your CV.
Nice to have
- OSCP, OSWE or CREST CRT/CCT certification
- Cloud penetration testing on AWS, Azure or GCP
- Mobile application testing
- Red-team experience