Penetration Testing Senior Specialist

About the role

We are seeking a highly motivated and skilled Penetration Testing Senior Specialist to join our cybersecurity team. The role involves identifying vulnerabilities across systems and networks, simulating attacker techniques, and advising on remediation to strengthen our security posture.

Key responsibilities

• Identify potential attacker methods and exploit system and network vulnerabilities.
• Simulate social engineering attacks to uncover security gaps.
• Gather network topology and usage information through technical analysis and open‑source research.
• Conduct code reviews using security testing and code scanning tools.
• Recommend and implement security controls to mitigate identified risks.
• Perform technical and non‑technical risk and vulnerability assessments.
• Maintain a deployable cyber‑defense audit toolkit based on industry best practices.
• Test for vulnerabilities in web, client, and standard applications.
• Conduct physical security assessments of servers, systems, and network devices.
• Report findings with risk levels, mitigation proposals, and reproducible test details.
• Explain business impact of vulnerabilities and present results to technical and non‑technical audiences.

Required profile

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology or related field.
• 5–7 years of experience in penetration testing or related cybersecurity roles.
• Professional certifications such as OSCP, OSWP, OSEP, GPEN, GWAPT, GMOB, GXPN, GWEB, GCPN, eWAPTX, or eCTHP are preferred.

Required skills

• Advanced proficiency in vulnerability scanning and result interpretation.
• Intermediate to advanced proficiency in penetration testing aligned with organizational policies.
• Experience with code review, security testing tools, and code scanning tools.
• Strong ability to analyze vulnerability and configuration data.
• Knowledge of adversary Tactics, Techniques, and Procedures (TTPs) and threat‑behavior simulation.
• Social engineering techniques and physical security assessment experience.
• Web application, client application, and standard application testing expertise.