03 / 07
Senior Penetration Tester
Lead complex penetration tests across web applications, infrastructure, cloud environments and other applications. Identify non-obvious vulnerabilities, develop proof-of-concept exploits and produce reports that support effective remediation.
What you’ll do
- 01Scope and lead black-box and white-box penetration tests covering web applications, APIs, networks, cloud environments and mobile applications.
- 02Develop custom exploits, scripts and tools to bypass controls and demonstrate concrete impact.
- 03Test manually and in depth beyond automated scanners, combining individual findings into realistic attack paths and business risk.
- 04Write precise, reproducible reports and guide clients through remediation.
- 05Help shape testing methodology, tooling and quality standards across the team.
- 06Mentor junior testers and review their work.
What you bring
- 01At least four years of penetration-testing or offensive-security experience, including experience leading engagements.
- 02Strong across the OWASP Top 10, network and Active Directory attacks, and at least one cloud (Azure/AWS/GCP).
- 03Fluency in at least one scripting language, such as Python, Bash or Ruby, for custom tooling and automation.
- 04Practical experience with Burp Suite, Nmap, Metasploit, BloodHound and comparable tools.
- 05OSCP or equivalent skills, together with strong technical writing in English.
Additional advantages
- +Source-code review
- +OT/ICS, mobile or thick-client testing
- +Public Burp/Ghidra extensions
- +CVEs or CTF placings