Full Description

Role and Responsibilities

• Supports penetration testing activities across applications, APIs, infrastructure, and cloud environments to identify security vulnerabilities. Works under guidance from senior team members, collaborates with cross-functional teams, and continuously develops technical skills by staying updated on cybersecurity threats and testing techniques.

• Execute penetration testing activities across web applications, APIs, infrastructure, and cloud

• environments within defined scope and methodology

• Perform manual security testing to identify vulnerabilities beyond automated scanner results

• Conduct controlled attack simulations and validate exploitability of findings

• Document vulnerabilities with clear evidence, impact assessment, and remediation guidance

• Support re-testing and verification of remediated vulnerabilities

• Participate in secure SDLC activities, including design reviews and security validation

• Collaborate with development, infrastructure, and security operations teams during testing

• and remediation

• Maintain up-to-date knowledge of emerging threats, attack techniques, and testing tools

Requirements

• 1-3 years hands-on experience in penetration testing or application/infrastructure security

• Strong understanding of Web technologies (HTTP/HTTPS, REST APIs, authentication mechanisms), Common vulnerabilities (OWASP Top 10, API Top 10), Networking fundamentals (TCP/IP, DNS, firewalls)

• Practical experience with Burp Suite/OWASP ZAP, Nmap, basic vulnerability scanners, Ability to perform manual testing and validation, not scanner-only testing

• Working knowledge of Linux environments and basic scripting (Python or Bash)

• Relevant certifications (e.g., CEH, Security+, eJPT) are a plus

• Strong analytical and problem-solving mindset

• Clear and structured technical documentation skills

• Ability to communicate findings effectively with technical teams

• Comfortable working independently within defined scope