About The Role We're looking for an experienced Penetration Tester to join our security team, focused on full-scope offensive security engagements across web/mobile applications, APIs, AI agents, networks, and cloud environments (AWS/Azure).
Core Responsibilities
- Full-Scope Penetration Testing — Conduct manual and automated security assessments on web and mobile applications, APIs, AI agent systems, internal/external networks, and cloud infrastructure (AWS/Azure)
- Exploitation & Risk Analysis — Manually exploit identified vulnerabilities to demonstrate real-world business impact, going beyond automated scan results
- Reporting & Remediation — Author clear,
actionable technical reports and partner directly with development teams to guide and validate fix implementation
- Tooling & Automation — Build and maintain custom scripts (Python, Go, or Bash) to automate testing workflows and bypass modern security defenses
Must-Have Qualifications
- Experience: 2+ years of dedicated professional experience in offensive security / ethical hacking
- Technical Expertise: Strong working knowledge of the OWASP Top 10, Active Directory attack paths, and industry-standard tooling (Burp Suite Pro, Metasploit, Nmap, Cobalt Strike)
- Certifications: OSCP preferred; equivalent certifications (OSWE, OSEP, CRTO) considered a solid plus
- Communication: Excellent technical writing skills, with the ability to translate complex vulnerabilities into business risk for non-technical stakeholders