* Analyze and study technical architecture, configurations, and documentation to fully understand system environments prior to performing security assessments.
Identify, exploit, and document vulnerabilities using industry-standard and custom tools.
Conduct advanced penetration tests on web applications, mobile apps, networks, cloud environments, APIs, IoT devices, and infrastructure.
Validate remediation efforts and provide re-testing to ensure vulnerabilities are fully resolved.
Perform social engineering assessments, phishing simulations, and physical security tests when required.
Stay current with emerging threats, vulnerabilities, exploit techniques, and offensive security tools.
Mentor junior penetration testers and support internal knowledge-sharing initiatives.
Contribute to research projects, whitepapers, or industry events when applicable.
Participate in client kickoff meetings, scoping sessions, and technical discussions, applications walkthroughs, and technical discussions.
Prepare detailed penetration testing reports, including technical findings, risk ratings, evidence, and tailored recommendations.
Present results to technical teams and senior leadership, offering clear and actionable improvement strategies.
Skills
Strong analytical and problem-solving skills to assess complex systems and identify security weaknesses.
Excellent communication abilities to clearly present technical findings to both technical and non-technical clients.
High attention to detail in testing, documentation, and reporting.
Effective time and project management to handle multiple assessments and meet deadlines.
Professional client engagement and teamwork with the ability to collaborate effectively and maintain confidentiality.
