Deskripsi pekerjaan
The Penetration Tester will be responsible for evaluating the security of the company's IT infrastructure. The role requires a strong understanding of cybersecurity, networking, and web technologies to identify and mitigate potential risks. The responsibilities include conducting penetration testing on applications, networks, and servers, performing vulnerability assessments, and simulating real-world cyberattacks. The tester will document findings, recommend remediation steps, and collaborate with technical teams to validate security improvements.
Tanggung jawab: Conduct penetration testing on applications, networks, servers, and IT infrastructure to identify security vulnerabilities; Perform vulnerability assessments and security testing to evaluate potential risks and security weaknesses; Simulate real-world cyberattacks to assess the effectiveness of existing security controls; Identify, analyze, and document security findings, including vulnerabilities, their potential impact, and recommended remediation steps; Perform web application, API, network, and infrastructure penetration testing; Utilize penetration testing tools such as Burp Suite, Nmap, Metasploit, OWASP ZAP, and other relevant security tools; Prepare detailed penetration testing reports and present findings to technical teams and stakeholders; Collaborate with developers, network engineers, and security teams to validate findings and support vulnerability remediation; Conduct retesting to verify that identified vulnerabilities have been properly resolved; Stay updated on emerging cybersecurity threats, attack techniques, and industry best practices.
Kualifikasi: Minimum 2 years of experience in penetration testing, vulnerability assessment, or a related cybersecurity role; Strong understanding of networking, operating systems, web technologies, and common security vulnerabilities; Hands-on experience with penetration testing tools such as Burp Suite, Nmap, Metasploit, or OWASP ZAP; Knowledge of OWASP Top 10, common attack vectors, and vulnerability assessment methodologies; Experience conducting web application, API, network, or infrastructure penetration testing; Familiarity with scripting languages such as Python, Bash, or PowerShell is an advantage; Understanding of security standards and frameworks such as OWASP, PTES, or NIST is an advantage; Relevant certifications such as OSCP, CEH, eJPT, or CompTIA PenTest+ are preferred.
Tanggung jawab
- Conduct penetration testing on applications, networks, servers, and IT infrastructure to identify security vulnerabilities
- Perform vulnerability assessments and security testing to evaluate potential risks and security weaknesses
- Simulate real-world cyberattacks to assess the effectiveness of existing security controls
- Identify, analyze, and document security findings, including vulnerabilities, their potential impact, and recommended remediation steps
- Perform web application, API, network, and infrastructure penetration testing
- Utilize penetration testing tools such as Burp Suite, Nmap, Metasploit, OWASP ZAP, and other relevant security tools
- Prepare detailed penetration testing reports and present findings to technical teams and stakeholders
- Collaborate with developers, network engineers, and security teams to validate findings and support vulnerability remediation
- Conduct retesting to verify that identified vulnerabilities have been properly resolved
- Stay updated on emerging cybersecurity threats, attack techniques, and industry best practices
Kualifikasi
- Minimum 2 years of experience in penetration testing, vulnerability assessment, or a related cybersecurity role
- Strong understanding of networking, operating systems, web technologies, and common security vulnerabilities
- Hands-on experience with penetration testing tools such as Burp Suite, Nmap, Metasploit, or OWASP ZAP
- Knowledge of OWASP Top 10, common attack vectors, and vulnerability assessment methodologies
- Experience conducting web application, API, network, or infrastructure penetration testing
- Familiarity with scripting languages such as Python, Bash, or PowerShell is an advantage
- Understanding of security standards and frameworks such as OWASP, PTES, or NIST is an advantage
- Relevant certifications such as OSCP, CEH, eJPT, or CompTIA PenTest+ are preferred
Informasi lowongan
- Tipe pekerjaan
- Contract
- Gaji
- Negosiasi