Overview
We're looking for a Penetration Tester to join in a major project. This role focuses on testing applications for security risks using both automated and manual methods. You'll work across multiple environments to ensure applications are safe, reliable, and meet high security standards.
Responsibilities
* Join planning sessions and walkthroughs to understand scope and requirements.
* Map out how the application works by exploring it (both public and logged-in areas).
* Review the source code to spot potential risks.
* Record and analyse traffic between client and server using tools like proxies and sniffers.
* Run vulnerability scans using commercial, open-source, and proprietary tools.
* Manually check scan results to remove false positives.
* Analyse the application's code using static code analysers.
* Test for common security issues, such as:
o Authentication & authorisation flaws
o Session & configuration management weaknesses
o Input validation & sensitive data handling issues
o Cryptography & exception handling gaps
Key Requirements
* At least 3 years in penetration testing.
* Manual exploitation of vulnerabilities following OWASP Top Ten standards.
* Practical experience finding and exploiting web app and API vulnerabilities (mainly manual testing ~90%, some automated testing ~10%).
* Strong background in application security testing and secure code review.
* Hands‑on experience with vulnerability scanners, static code analysers, and network sniffers.
* In-depth knowledge of secure coding practices and how to detect vulnerabilities.
* Ability to work with global teams and meet high client expectations.
* Excellent attention to detail, documentation, and communication skills.
Benefits
Work From Home
#J-18808-Ljbffr