5+ years of experience in cybersecurity or related field
Proficiency in penetration testing and vulnerability assessment
Strong knowledge of security tools like Metasploit, Nmap, and Burp Suite
Experience with scripting languages such as Python and Bash
Familiarity with OWASP guidelines and CVEs
Ability to communicate technical findings to non-technical stakeholders
Certifications such as CEH, OSCP, or CISSP preferred
Responsibilities
Conduct penetration testing on various platforms including web applications and cloud environments
Identify and exploit weaknesses in systems and applications
Document findings and prepare detailed reports for stakeholders
Recommend solutions to address security vulnerabilities
Use security tools and develop scripts to automate testing processes
Stay updated on emerging threats and exploitation techniques
Collaborate with security teams and educate on best practices
Benefits
Flexible work hours and remote work options
Professional development opportunities
Access to the latest security tools and technologies
Support for certifications and continuous learning
Collaborative and inclusive work environment
Full Job Description
Job Summary
We are seeking security analyst who is responsible for simulating cyberattacks on systems, networks, and applications to identify vulnerabilities before malicious actors can exploit them.
Key Responsibilities
1. Security Testing & Assessments • Conduct penetration testing on: o Web applications - o Network and infrastructure - o Desktops/Servers Linux and Windows - o APIs, cloud environments, and mobile apps • Perform vulnerability assessments using automated tools and manual techniques • Simulate real-world cyberattacks to evaluate system resilience 2.
2. Exploitation & Analysis a. Identify and exploit weaknesses in systems and applications b. Analyze security flaws, misconfigurations, and insecure code c. Test authentication systems, access controls, and network defenses d. Identify exploitable credentials and attack paths
3. Reporting & Documentation a. Document all findings, methodologies, and evidence of vulnerabilities b. Prepare detailed technical and executive reports c. Communicate risks and remediation recommendations to stakeholders
4. Remediation & Security Improvement a. Recommend solutions to address identified security gaps and vulnerabilities b. Work with development and infrastructure teams to implement fixes c. Validate remediation through re-testing and follow-ups
5. Tooling & Automation a. Use security tools such as: - Metasploit, Nmap, Burp Suite, Kali, Vulnerability Scanners, Pentera Console and Surface b. Develop scripts (Python, Bash) to automate testing processes c. Design custom exploits and testing methodologies
6. Continuous Learning & Threat Research a. Stay updated on: o Emerging threats b. Exploitation techniques c. Security vulnerabilities (OWASP, CVEs) d. Research new attack vectors and penetration testing techniques
7. Collaboration & Advisory a. Work with: i. Security teams ii. Developers iii. IT operations and/or Infrastructure Teams iv. Educate teams on secure coding and security best practices • Support compliance, audits, and risk assessments
