Penetration Tester | Vulnerability Analyst

About the role

A full-time, mid-to-senior level Penetration Tester / Vulnerability Analyst is sought to identify, assess and help remediate security weaknesses across applications, networks, systems and digital infrastructure. The role combines hands-on security testing, vulnerability assessment, risk analysis and technical reporting.

Key responsibilities

• Conduct authorized penetration testing of web applications, APIs, networks, servers, cloud environments and other approved systems.
• Perform vulnerability assessments, define scope, methodology and rules of engagement, and carry out reconnaissance and asset discovery.
• Test authentication, authorization, session management, input validation, access controls and other security mechanisms; assess APIs, web services, mobile apps and cloud services.
• Validate vulnerabilities, assess severity, analyse attack paths and prioritise findings by risk.
• Review configurations, security controls and documentation, research new vulnerabilities and advisories, and monitor vulnerability trends.
• Work with system administrators, developers, DevOps and security engineers, provide remediation recommendations and validate fixes through retesting.
• Prepare detailed reports for technical and management audiences, document evidence and present findings to stakeholders.
• Maintain records of vulnerabilities and remediation status, support vulnerability-management programmes and help improve testing methodologies and reporting.

Required profile

• Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Technology or a related field.
• Previous experience in penetration testing, vulnerability assessment, security testing or cybersecurity analysis.
• Strong understanding of network security, operating systems, web applications, APIs, databases and cloud environments.
• Familiarity with OWASP principles, vulnerability management, risk assessment and CVE/CVSS concepts.
• Ability to write clear technical reports and communicate risks to technical and non-technical audiences.
• Strict adherence to authorised testing procedures and confidentiality.

Required skills

• Vulnerability scanners, penetration-testing tools, network-analysis tools and security-testing frameworks.
• Advantageous: Burp Suite, Nmap, Nessus, OpenVAS, Wireshark, Python, PowerShell, Bash, AWS/Azure/Google Cloud, NIST, ISO 27001, CIS Controls.
• Certifications such as OSCP, CEH, GPEN, Security+, eJPT or PNPT are advantageous.

What we offer

• Competitive salary and comprehensive benefits.
• Diverse cybersecurity assessment and vulnerability-management projects.
• Training in penetration testing, vulnerability analysis, application security and cloud security.
• Support for certifications and career progression toward Senior Penetration Tester, Vulnerability Management Lead, Security Consultant, Red Team Specialist or Cybersecurity Manager.