Key Responsibilities:

• Perform penetration testing on web applications, APIs, networks, and systems
• Conduct Red Team exercises to simulate advanced cyberattack scenarios
• Identify, exploit, and document security vulnerabilities
• Provide detailed reports with risk ratings and remediation recommendations
• Collaborate with development and infrastructure teams to fix vulnerabilities
• Perform vulnerability assessments and security audits
• Stay updated on latest attack techniques, tools, and threat landscape
• Support incident response and forensic investigations when required
• Ensure compliance with security standards and policies

Required Skills:

• Strong knowledge of network security, web security, and system security
• Hands-on experience with tools such as:
  • Metasploit
  • Burp Suite
  • Nmap
  • Nessus
  • Wireshark
• Good understanding of:
  • OWASP Top 10 vulnerabilities
  • Penetration testing methodologies (PTES, OSSTMM)
• Knowledge of scripting languages (Python, Bash, or PowerShell)
• Experience with Linux/Unix systems
• Familiarity with Active Directory environments and privilege escalation techniques

Preferred Qualifications:

• Certifications such as:
  • CEH (Certified Ethical Hacker)
  • OSCP (Offensive Security Certified Professional)
  • CREST, GPEN (Good to have)
• Experience in Red Team operations / adversary simulation
• Knowledge of cloud security (AWS/Azure/GCP)