🕒 13 days ago
Assess and validate web application vulnerabilities, confirm exploitability, rate severity, and write clear customer-facing reports with actionable remediation guidance.
Penetration Tester
🕒 4 days ago
Penetration TestingNetwork SecurityWeb Application SecurityAPI Security
📜 Description
- Conduct security audits and network, web application, API, mobile, and cloud penetration tests.
- Prepare assessment reports documenting findings, evidence, and assessment methods.
- Use social engineering to identify opportunities to improve security awareness and education.
- Recommend ways for clients to reduce security risks to networks and products.
- Work independently or with teams on projects, with oversight from senior team members or a Project Manager.
- Maintain proficiency in current security tools and skills.
🛠️ Requirements
- At least 2-3 years of professional experience preferred.
- Experience securing AWS services such as EC2, S3, KMS, and RDS, or comparable Azure and GCP services.
- Penetration testing experience across APIs, mobile, cloud, and web applications.
- Familiarity with Python, Perl, Go, or Ruby scripting.
- Hands-on experience building or developing server or application technologies.
- Experience using penetration testing tools and replicating threat behaviors.
- Proficiency with Wireshark, tcpdump, IP protocols, subnetting, routing, and switching.
- Strong written and oral communication skills, including producing comprehensive reports and assessments.
✨ Benefits
- Flexible working hours;
- Competitive health packages;
- Life insurance;
- 401k plan with company contributions
- Maternity and parental leave;
- Paid, flexible vacation.
Full job description
The Penetration Tester is responsible for working as part of the Assessment Team to conduct and participate in offensive and defensive security projects for OccamSec and its clients. This individual will work as part of a security team and report to an Assessment Team Lead.
Job Responsibilities:
- Conduct security audits, network penetration tests, and web application, API and cloud assessments.
- Draft security assessment reports that outline findings and provide a walkthrough of the assessment performed with evidence provided appropriately.
- Use social engineering to identify improvement for security awareness and education.
- Provide guidance and recommendation to clients on ways to fix or reduce security risks to their networks and products.
- Operate as part of a team on larger, more complex projects with oversight from senior team members.
- Operate independently on projects within defined-skill set, with oversight from a Project Manager.
- Maintain proficiency in current security tools and skills.
Experience:
- Candidates with at least 2-3 years of professional experience are preferred.
- Proficient in working with AWS services like EC2, S3, KMS, RDS, or similar services on Azure & GCP, with a focus on implementing security best practices.
- Skilled in conducting penetration tests for API, Mobile, Cloud, and Web Applications.
- Familiarity with scripting languages such as Python, Perl, Go or Ruby.
- Hands-on experience in building or developing Server or Application Technologies.
- Utilized penetration tools effectively in various scenarios.
- Applied expertise in replicating threat behaviors.
- Proficient in using packet analyzer tools like Wireshark and tcpdump.
- Sound understanding of IP network protocols, sub-netting, routing, switching, etc.
- Extensive background in penetrating and exploiting secure networks and systems, staying updated with the latest security software packages, protocols, and computer technologies.
- Excellent written and oral communication skills, with a proven track record in generating comprehensive reports and assessments.
Benefits
- Flexible working hours;
- Competitive health packages;
- Life insurance;
- 401k plan with company contributions
- Maternity and parental leave;
- On-the-job training opportunities; and
- Paid, flexible vacation.
Similar jobs
Search more Cybersecurity Analyst jobs
📅 Sep 7
Conduct penetration tests across web, API, and mobile applications, guide clients on vulnerability remediation, and help embed continuous application security into development workflows and products.
🕒 11 days ago
Monitor client security environments, triage and investigate alerts, execute authorized containment actions, and document findings and escalations to support timely incident response and client security operations.
Security Analyst
🕒 26 days ago
Netrix Global👥 501 - 1000 employees🏢 Information Technology And Services
🕒 26 days ago
Monitor and investigate security events across client environments, triage alerts, support incident response, and improve Elastic SIEM detections using log analysis and threat intelligence.
IT Security Analyst - India
🕒 26 days ago
Appen👥 10,000+ employees🏢 Information Technology And Services🧠 AI-native
🕒 26 days ago
Protect information assets by operating Microsoft security controls, leading incident response, maintaining ISO 27001 documentation, and managing identity, access, patching, and vulnerability remediation.