Senior Penetration Tester

About the role

We are seeking a senior offensive security professional to lead advanced penetration testing initiatives. The role focuses on hands‑on exploitation across web, API, mobile, and endpoint environments, moving beyond reporting to delivering actionable insights.

Key responsibilities

• Conduct comprehensive web, API, and mobile (Android/iOS) exploitation engagements.
• Perform network and infrastructure attacks to assess lateral movement and persistence.
• Execute endpoint security evasion techniques, including AV/EDR bypass and payload obfuscation.
• Explain the methodology and rationale behind bypass techniques to stakeholders.
• Provide clear, actionable remediation recommendations after successful exploitation.

Required profile

• Demonstrated hands‑on experience with real‑world AV/EDR bypass scenarios.
• Strong expertise in web, API, mobile, and network infrastructure attacks.
• Experience that goes beyond automated scanners and standard web penetration testing.

Required skills

• Web application exploitation
• API security testing
• Mobile application exploitation (Android, iOS)
• Endpoint security evasion
• AV/EDR bypass techniques
• Payload obfuscation
• Network penetration testing
• Infrastructure attack methodologies